Annex 


Entity No 


Draft Framework for Regulatory Sandbox 


If you make your own crypto currencies and regulate it in India who 
will Mine those crypto? And what will be the acceptance of those 
crypto? Nothing!! And if you plan something like XRP then there will 
be no Value. When 50% of the world is into crypto is’t it better to 
regulate and use the infrastructure other countries have built to use it 
regulate? Crypto can now be traced FBI has a software made for it, 
Australia has laws that exchanges have to report suspicious 
transaction. You cannot have control over the whole data like china 
does! We are a democracy please don't forget! But yes regulating 
exchanges will definitely help reducing the issues you have. ICOs and 
Fund raising can be monitored and should be kept a close eye on. 
ICOs are another way of funding for good projects which cannot raise 
funds in the stock market. CrowdFunding is the future, and This 
technology is the Key to it. Why ban and go 10 years back in time? 
Our country has always been ignorant on new tech. If you guys need 
any help in understanding crypto or it’s technology i would be happy 
to help but banning the mainstream crypto and releasing govt backed 
crypto will be a disastrous failure. Look at Petro Coin by the 
Venezuela’s President Maduro, it failed despite being backed by OIL 
which is the HolyGrail of assets. Bitcoin, Ethereum and other crypto 
are into existence and in use because “NO ONE OWNS THEM” if it 
had been owned by the US govt it wold never become this famous 
and in use. So if you make your own crypto and regulate it into the 
market it will be a total failure and a point to make fun of our country 
from the crypto community around the world. Think about all these 
points and then decide something. 
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must first congratulate you for taking such a much-awaited step for 

issuing guidelines for enabling setting up of a Regulatory Sandbox in 
India. I, as a citizen of India, understand that the guidelines be 
published without any delay to enable the FinTech environment to 

flourish in India. 

I also humbly suggest that the enabling provisions should not impose 
restriction related to "net worth" of an entity proposing to participate 
in the sandbox. In fact, emphasis should be to gather as much as 
possible clearly validate ideas that could be put into action within a 
period of 1 (one) year. 

Otherwise, these guidelines would be supporting only those who are 
mighty and strong in which case a good idea would be lost and the 
end consumer shall be the sufferer. 

Secondly, privacy of a consumer should also be protected and 
therefore, his consent to participate in the Regulatory Sandbox 
should be obtained before he is made part of the sandbox. 

I herein below set out specific legal challenges that may impact the 
decision of a Start-up to participate in the Regulatory Sandbox. 

Point No. 1 

Restrict Open Ended Liability: An open-ended liability of a Start-Up in 
case there is a default or something goes wrong is unlimited. In the 
case of product liability claims, the defense is that the producer of 
goods has taken reasonable care while manufacturing. In a sandbox, 
there won't be any proven products and no measure to determine 
whether reasonable care is taken or not. Therefore, high exposure 
and hence, RBI should provide an umbrella to the start-up and 

promoters. 

Point No. 2 

Call for a Consent from Customer Consent of a customer to be part 
of the sandbox is imperative and should be made a necessary 
condition; such consent would help reduce the liability in case of 

default. 
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Point No. 3 

Heightened Data Privacy Currently, Financial Institutions are not 
permitted to share their data with third parties. It would be imperative 
for start-ups to use the data sets for testing or products and to run a 
proof of concept. RBI should allow limited data sharing for a limited 
purpose. By way of a third party certificate, the Finance Institutions 
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should ensure that privacy is built in the system by design. 

Point 4 

Prescribe Security Standards Standard of security should be 
announced as this would limit the liability of a Start-Up. 

Point 5 

Control Business Continuity Risk RBI should also clarify whether 
business continuity risk has to be addressed or not. Moreover, if it 

has to be addressed than in that case what is a reasonable standard 

it should undertake? 

Point 6 

Entry Barrier The requirement to have Net Worth of INR 50 lacs, proof 
of concept and technological for broader deployment would act as an 
entry barrier. If an idea is validated, the chance should be given to be 
part of the regulatory sandbox so that benefits could be passed on to 
the consumers. Other elements could be gathered over a period of 1 
(one) year of Regulatory Sandbox with the support of the bank who 
would run the said Regulatory Sandbox. 
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At the outset, thank you for inviting the comments from all the 
stakeholders on the draft enabling framework issued by RBI for 
Regulatory Sandbox. We are pleased to submit our attached 

feedback note on the draft framework. 

We request RBI to consider our suggestions and comments included 
in the attached representation note while finalising the framework on 
RS. We will be happy to meet and further share the 

details/clarifications, as needed on our comments. 

The Reserve Bank of India (RBI) released a draft on enabling 
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framework for Regulatory Sandbox on 18 April 2019 seeking 

comments of the concerned stakeholders on the contours of the 
proposed enabling framework for regulatory sandbox in India. 
We are pleased to submit our response on the draft enabling 
framework for regulatory sandbox in India: 

I. Background 

The introduction of the Regulatory Sandbox will provide a platform 
and secured space for technology-led and FinTech organizations to 
innovate and test ideas and will bring different stakeholders on a 
regulated platform. Such regulator-aided innovation in the financial 
services space will help organizations work on ideas in a secure and 
controlled environment and will encourage innovation in the areas 
where there is an absence of governing regulations or a need to ease 
regulations temporarily. It will also create the possibility of being able 
to address or find solutions to the fringe cases from a regulatory 
standpoint for financial services by allowing organizations to work in 
a defined environment. Further, it will provide greater flexibility to the 
organizations to execute their innovative ideas which otherwise might 
not be able to see the light of day due to the constrained regulatory 

environment. 

II. Our specific comments/ feedback on the draft framework released 

by the RBI are as follows- 

a) Regulatory Sandbox: Risks and Limitations (para 4 of the draft 
framework) 

Our Comments: 

In terms of development in the financial sector, in the past few years, 
it has been observed that FinTech led products and services are 
changing the landscape by enabling access to financial products and 
services to a wider audience. Considering this aspect, the draft 
highlights risks and limitations associated with the regulatory 

sandbox as well. 
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However, we believe that there could be more points addressing risks 

and limitations which need attention when RS comes into existence 

as a platform. The applicants will come to the RS platform with new 
innovative ideas and the same will then be exposed to a wider range 
of stakeholders. It is, therefore of paramount importance that their 
intellectual property rights are kept secure and safe so that they are 
not reluctant to be part of the RS process. One of the concerns could 
be that when applicants bring their solutions to the RS platform, there 
will be big players in the market which might replicate the concept at 
much faster pace and bring the product to the customers before the 
applicant can actually complete the RS process and launch the 
product in the market. Therefore, suitable confidentiality agreement 
and non-disclosure clauses might need to be put in place for the all 
stakeholders. To illustrate the above stated point in detail we would 
like to site a hypothetical example, suppose an applicant becomes 
part of the RS process and there are other stakeholders involved in 

executing the idea, like banks, who have better funds and resources 
as compared to a start-up, will have the option to replicate the idea at 
a much faster pace. Therefore, we believe that the RS guidelines 
should protect the intellectual property rights of the applicants by 
means of confidentiality agreement and non-disclosure agreement to 
be signed between the applicant and relevant stakeholders getting 
involved in the process and a suitable direction or instructions from 

RBI on these aspects will enhance confidence of the fintech entities 
for going through the RS process. 

b) Regulatory Sandbox: Eligibility Criteria for Participating in the 
Sandbox (para 5 of the draft framework) 

Our Comments: 

The draft focuses and encourages on the areas where there is 
absence in governing regulations, or there is requirement to ease 
regulations and foster innovation, and promises the ease of delivery 
of financial services to the customers. One of the stated objectives of 
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the RS platform is to foster financial inclusion and make financial 

services accessible to all. Given that innovation can be delivered not 

just by “start-ups” or the incumbents, it is critical for any RS platform 

therefore to focus on the merits and demerits of the solution and not 

focus purely on the category of eligible applicants. The eligibility 
criteria in RS guidelines states that the platform is available to start¬ 
ups, as defined in law, only, which in turn defines the target applicants 

as entities which are not older than 7 years and their turnover has not 

exceeded INR 25 crore. Also, there is a requirement to have a net 

worth of INR 50 lakh for applying to the process. Essentially, this 

excludes two larger segments of the innovators on both sides, one 

being very new age start-up companies which do not have required 

capital and on the other side big organizations which have turnover 

more than INR 25 crore. Hence, innovations brought to the market by 

such entities will not be entertained on the RS platform, which in turn 

may end up countering one of the key purposes of the sandbox i.e. 

to provide access to financial services. To site global examples 

pertaining to the above stated suggestion like Financial Conduct 

Authority of the UK where eligibility criteria is primarily focused on the 

idea and what impact does it provide to the society in large rather 

than limiting entrants with capital requirement. This will definitely 

provide a larger pool of aspirants who have idea and want to become 
part of the RS, and we, therefore, request RBI to extend the eligibility 

criteria to all organisations, while finalising the RS framework. 

c) Design Aspects of the Regulatory Sandbox (para 6 of the draft 
framework) 

Our Comments: 

i) The draft RS guidelines have put out a list of positive and negative 

areas where sandbox entities can/cannot operate and provide their 

solution in the space of financial inclusion. One of the areas excluded 

from scope of RS (negative list) is credit information. Considering the 

recent trends, alternative credit scoring has become a potential tool 
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in analysing the credit behaviour of the borrowers and providing 

instant loans. The lending industry has witnessed smart and 

innovative alternative credit scoring models being adopted by large 

and small organisations and these innovations will continue to 

happen in making the scoring models more and more effective. RBI 

may accordingly consider including the ‘credit information’ area as 
part of the positive list to foster innovations in this space. 

ii) Also, it would be helpful to all stakeholders if there is a clear 

mechanism mandated by the RBI on the communication to the end- 

customers who are going to be reached out to consume the products 
regarding the nature of the test program and recognition from the 
end-customers that they understand the risks involved. 

III. Conclusion 

Introducing the enabling framework for a regulatory sandbox is a 
welcome move by RBI as it will help in fostering innovation in the 
financial services space on a platform where all stakeholders can 
participate and provide their valuable feedback to the applicants for 

further improvement. One of the added benefits for the entities 
undergoing this process shall be to get upfront regulatory certainty on 
certain products where there are no regulations or have ambiguity in 
interpretation of existing regulations. 

We request RBI to consider our above suggestions and comments 
while finalising the framework on RS. 
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Sub: DEFFICIENCIES OBSERVED IN OPERATIONAL 

INSTRUCTIONS GOVERNING MONEY CHANGING ACTIVITIES & 
SUGGESTIONS TO THE FOREIGN EXCHANGE DEPARTMENT 
(FED) OF THE RBI FOR STREAMLINING THE SAME AND EASE 
COMPLIANCE FOR AUTHORISED MONEY CHANGERS (FFMC / 
AD CATEGORY-II). 

We would like to bring to your kind notice that certain Operational 
Instructions contained in the Master Direction — Money Changing 
Activities, might be restricting the transition of our industry to a Digital 
model and greater use of Forex Cards, and instead promoting 
unrecorded usage of cash in payments and increased sales of 
Currency Notes - contrary to Government objectives of Digitisation, 
Transparency and Elimination of black money. 
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The ‘Memorandum of Instructions Governing Money Changing 
Activities’ were first outlined under the Foreign Exchange Regulation 
Act (FERA) 1974, and later carried forward mostly unchanged under 
the Foreign Exchange Management Act (FEMA) 1999 to regulate 
traditional retail foreign exchange activity which was predominantly 
conducted in cash, cheque & DD for transacting of foreign currency 
notes & travellers cheques. 

Since then preferred payment options have evolved to become digital 
like NEFT/RTGS/IMPS/UPI & through online payment gateways by 
Credit/Debit card & Net-banking, and newer technologies like the 
Prepaid Forex Card have emerged, but relevant regulations have not 
kept pace. 

And where Fintech’s like us have tried to adopt these new 
developments in our business-model to improve on traditional 
industry practices, we have faced numerous hurdles in 

implementation in trying to operate an Online model within the 
boundaries of regulations which were conceived to govern Offline 

processes. 

More specifically, please find below the issues requiring attention and 
updating of regulations: 

1. Avenues for misuse of KYC: Regulations state that an ‘in-person’ 
KYC of the client must be conducted by a ‘competent’ person. 
However, wordings in the relevant guidelines state that: The Reserve 
Bank will not generally, prescribe the documents which should be 
verified by the Authorised Money Changers (AMCs) while releasing 
foreign exchange’ 

Over time, to identify the genuineness of the foreign traveler, this has 
come to be interpreted as verification of Original (OSV) Passport, 
Ticket & Visa for the country of travel. And now money-changers 

collect PAN Card too. 

But these hard-copies of documents can be misused by reusing them 
for bogus transactions. A better KYC regimen can mandate a 
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time/date stamped photograph also being taken of the client as part 
of the KYC process and digitization of documents so they cannot be 
tampered with. Apps are available for this, which we would like to test. 

2. Payment identification: One of the guidelines mandates that 

Payment needs to be received from the traveler or a close relative. 

RBI Guidelines do not even state as to who constitutes a close 

relative, and one needs to refer to the Companies act for this. 

This is difficult to monitor in practice or in real-time since Payment 
Gateways are unable to capture this data, causing inconvenience to 
clients and making compliance difficult for agents. This is the single 
guideline in our industry responsible for driving agents to do 
unrecorded transactions, counter to the objectives of regulations in 

the first place to make all transactions accounted. 

As long as it is an account-to-account payment, it should not matter 

who pays for forex since the funds are taxed & traceable. This will 
discourage cash transactions. 

3. Basic Travel Quota for sale of forex now falls under the overall LRS 

(Liberalised Remittance Scheme) limits, however FFMC category 
money-changers are restricted from selling forex to Students for fee- 

payment at foreign universities or Reload forex cards issued to 

students for Maintenance purpose, which is illogical. 

If FFMCs are authorized to deal in forex, they should be allowed to 
issue forex for all categories and purposes. Remittances is anyway 
additionally reserved for AD2 category. 

Digital Forex Cards must be promoted over Currency notes - banks 
who are the issuers of cards are hesitant to appoint agents for 

distribution since it is difficult to monitor compliance of the above 

guidelines - leading to transactions being done in cash, which has a 

negative AML impact. And the corresponding increase in usage of 
foreign currency notes has extremely negative FATF impact. 
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(a) As per point 6.3 of the Regulatory Sandbox guidelines, we 

propose to demonstrate how our technology can be more gainfully 
applied in order to better comply with RBI guidelines. 

(b) Our proposed solution aims to plug loopholes in the Foreign 
Exchange ecosystem, make it easier for consumers to transact, and 
enable better compliance by industry participants (6.5.2). 

(c) To enable greater Digitisation of Forex transactions, appropriate 
guidelines need to be revised to take into account current 
improvements in technology and enable adoption of the same (6.5.3) 
Banks do not have any such restrictions when Credit & Debit cards 
are used for Forex transactions. Forex Cards should also be treated 
on-par. 

The added advantage for travelers is that usage of a Forex Card is 
cheaper (it can be issued at an average margin of just 1% on Inter¬ 
bank rates (IBR), as opposed to Credit/Debit card spends abroad 
which can cost the user anywhere upto 10% over IBR), and effect of 
fraud is minimized as exposure is limited to just the funds loaded onto 
the forex card. Also, purchasing currency at Airports is now 
prohibitively expensive as rates there are maintained at around 16- 
18% above IBR. Wider access to and usage of forex cards should 
therefore be ensured & encouraged. 

In the current regulatory scenario, every Govt, objective like 
promotion of MSME enterprises, digitization of transactions, removal 
of black-money from the system, etc., are being undermined in the 
forex space as most are being forced to deviate in order to remain 
competitive as they are unable to comply due to contradictory 
regulations. 

We are a startup recognised by the DIPP. 
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5 We have been reviewing the draft enabling framework that was 

released on 18 April 2019 | 



However, there are regulations that currently prevent or are absent in 
some aspects of these undertakings. Such as: 


1. Recognition of DLT registered securities as a (“transparent” & 
“dematerialized”) asset class and the applicable license regime for 
issuance and trading of such assets 

2. Investing in equity of privately held companies is illegal for retail 
investors (equity crowdfunding) 

Our queries regarding the current sandbox are as follows: 

1. Eligibility to participate in the sandbox 

a. Page 6, section 1 says: 

https://dipp.gov.in/sites/default/files/Startup_Notification11April2018 

_0.pdf 

"Provided that an entity formed by splitting up or reconstruction of an 
existing business shall not be considered a ‘Startup’." Would the 
company be eligible if it is, 

i. A wholly owned Indian subsidiary of a soon-to-be-incorporated EU 
based company (so not an existing business)? 

ii. Or would it need to an independent Indian company without a 
foreign corporate shareholder? 

b. Does the technology need to be built in-house or can licensing the 
tech from a third party company still qualify as "innovative” enough? 
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We would argue that we are providing innovative services locally 
using a combination of newer technology licensed from third parties. 

1. Timing of application and post-sandbox business continuation 

a. When would RBI consider allowing companies to apply to the 

sandbox? If the concrete dates not finalized, it would be helpful to the 
best estimated time frame wherein RBI will accept applications? 

b. What happens after the sandbox testing is over and the results are 

considered as successful, will the service be then allowed to operate 
fully with the same freedom as they had during the sandbox 

1. Clarifications on the terms used 

a. In section 6.3, it is mentioned that crypto asset services are to be 

excluded from the sandbox. However, in some international 

jurisdictions concepts of security tokens are being recognized where 
the economic benefits related to an underlying regulated 

asset/security is “tokenized” (e.g. dividends/profits but not voting 
rights) in compliance with current regulations codified in “smart 
contracts”. Can we confirm that such security tokens are not 
considered as crypto assets or crypto asset services and hence shall 
be eligible for the RBI sandbox? 

b. If crypto assets services are excluded, are we still allowed to use 
public/permissionless blockchains (e.g. Ethereum, Stellar etc) for 
tokenizing regulated securities (so not using the crypto currency 

related aspects of the blockchain). However, to run services on such 

blockchains it is required to purchase cryptocurrencies to pay for the 

usage (mining fee/”gas”). Can we still be allowed to use a public 

blockchain without offering any crypto asset services to 

users/customers? 

1. Regulatory bodies involved in the sandbox: 

a. Some of the regulations that are being touched involve SEBI, are 

they also part of this sandbox and consider “light-touch” regulation of 

certain aspects of the proposed innovative services? 

1. Criteria for success: 
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a. Will there be some more objective criteria for testing the innovative 
service that will be published publicly or will it be determined purely 

on a case-by-case basis and known only after entering the sandbox 
Looking forward to hearing back from you on any further clarifications 
required and the next steps. 

6 

This is with reference to the draft guidelines issued by RBI for an 

‘Enabling Framework for Regulatory Sandbox’ for Fintechs. 

Entity 6 welcomes this progressive move by the RBI as it would set 
a firm stage for Fintechs exploring innovative products and would 
help in sustaining innovation in financial products and services. 

Following the issuance of the draft guidelines, we had circulated the 

same amongst our members and stakeholders in the Fintech 

ecosystem and basis the feedback and suggestions received, we 

have put together a brief note. The same is being attached along with 

this email for your reference and kind consideration. 

RBI’s ‘Draft Enabling Framework for Regulatory Sandbox’ 

Entity 6 welcomes the RBI’s Draft Enabling Framework for 
Regulatory Sandbox (RS) as it would set a firm stage for Fintechs 
exploring innovative products and would help in sustaining innovation 

in financial products. It is bound to reduce the number of failures, 

bring customer centric products to market and draw positive interest 
from investors. This would create far more stable platform for entities 

who now can look at 3-5 years’ picture and visualize the business 

models that will transform the Indian financial sector. 

Globally, RS has been introduced in many countries (about 20) 
including UK, Singapore, Hong Kong & now India. Different kinds of 

sandbox approaches have been adopted in different countries. While 

UK & Singapore facilitates testing per case basis, Australia offers 
open sandbox which is applicable to all with an option to customize 

for special cases. 

The regulators in UK discuss terms of product testing on an individual 
basis depending on the type of project, testing goals and existing 
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risks. Since India has adopted the approach to test on a case to case 

basis, the onus is on regulators for faster formation of cohorts and to 

ensure that innovators are facilitated with respect to entering the 

testing process. Further, it is important to facilitate cohort interaction. 

Basis the inputs received from various stakeholders in the Fintech 

ecosystem, Entity 6 would like to make the following submissions on 
the Draft Enabling Framework for Regulatory Sandbox for RBI’s 

consideration. 

Key Concerns / Suggestions 

Section 6.5 - Fit and Proper Criteria for Selection of Participants 

in RS 

• Clause 6.5.1 a. As per the draft guidelines, the entity should be a 

company incorporated and registered in India and shall meet the 

criteria of a start-up as per Govt, of India, DIPP Notification No. 

G.S.R. 364(E) dated April 11, 2018. 

For the sandbox to lead to maximum positive outcomes and 

augment the growth of the financial services industry, it should 

be applicable to all fintechs / BFSI sector players without 
restricting it to only ‘start-ups’ as defined in the GOI DIPP 

Notification. Hence, Clause 6.5.1 a should be deleted. 

Since bigger fintechs have established themselves through market 

disruptions, their participation in the sandbox may be extremely 

relevant and is likely to result in more meaningful outcomes for 

consumers and the ecosystem. Also, many fintechs, especially 

aggregators, offer a wide range of products and services and while 

they may be an established entity in one, they may be a new entrant 

for another. The participating fintechs, instead, could be 

restricted by the number of transactions under the sandbox, to 
encourage sound decisioning along with controlled, conducive 

and safe experimentations. This limit on transaction volume 

should be determined according to the product and service 

offered. 
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• Clause 6.5.1 b. As per the draft guidelines, the entity shall have a 
minimum net worth of Rs.50 lakh as per its latest audited balance 
sheet. This can be a roadblock for new entities. Most start-ups 
have a negative net worth and having the minimum net worth 
criterion of Rs. 50 lakh would severely stifle innovation. 

• At present, access to credit information is not available to any non 
- bank or any Fintech player. It is important to plan for how the 
availability of information could be optimized for Fintechs. 
Enablement of credit bureau information for platform players 
and other Fintech players, who constantly work on innovation 
would help in achieving faster results. 

• Clause 6.5.7 As per the draft guidelines, the applicants shall be 
required to share the results of Proof of Concept (PoC) / testing of 
use cases including any relevant prior experiences before getting 
admission into RS for testing, wherever applicable. This too can be 

an entry barrier for new startups and hence it is suggested that 
if applicants cannot conduct User Acceptance Test (UAT) in 
their own environment, then they can use the Regulatory 
Sandbox. RBI may consider adding this to the guidelines. 

Other Suggestions 

• As the RS will operate in a live production environment requiring 
banks / financial institutions to share data with start-ups, RBI may 

provide guidance on the safeguards to be followed for ensuring 
safety of such data. 

• The active guidance and close monitoring of the participants in the 
regulatory sandboxes could give rise to level playing field issues, 

creating two tiers between those firms in the sandbox and those 
outside it. The Regulatory sandbox will enable some Start-ups to 

apply and qualify to conduct the PoC in the RS, and some start-up 
firms may be left behind, this will create two tiers among the startup 
firms. That is why, the objective of the regulatory sandboxes and 
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the entry criteria should be clear and made public in order to 

ensure a high degree of transparency in the entry process. 

• The end-to-end application process for a fintechs to enter the 

sandbox, according to the draft guidelines, will take approximately 26 

weeks, which is too long to be viable for most fintechs. It is therefore 
recommended to either have few steps or faster turnaround time 
so that there is meaningful participation by relevant players. 

• The following products/services may also be included in list of 
innovative products/services/ technology 

_ Aadhaar vault integration 

_ Corporate services such as bulk payments/collections, Forex, 

SCFU 

_ Solutions for Agriculture/small business finance 
_ Reconsider credit information sharing services among the BFSI to 
ensure easy and effective sharing of credit information 

• In case of individual innovators coming together to provide feasible 
and acceptable solutions, there should be a proper mechanism to 
handle the eligibility criteria and the solutions. 

• The sandbox should also be open to all BFSI players to experiment 
innovative ideas that can be tested and approved by regulators, 
thereby ensuring confidentiality of sensitive information and 
significantly reducing the TAT for innovations in BFSI. 

• Model of Regulatory Sandbox (RS) - While the model envisaged by 
RBI in the draft is a Centralized Regulatory Sandbox, Banks/ FIs may 
also prefer their own RS wherein each FIs/ Banks have their own 
regulated sandbox environment, as this would help in individual 
Banks/ FIs for their specific needs. 

• With regard to clause 6.6 that deals with extending or exiting the 
sandbox, there is need to define in a robust manner the timelines and 
the exit criteria with appropriate flexibility being built in as there will 
be a lot of learning by doing that would happen both for the 
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innovators, the financial institutions that use the technology and the 
regulators. 

• According to clause 4.4, post-sandbox testing, a successful 

experimenter may still require regulatory approvals before the 

product/services/technology can be permitted for wider application. It 
is suggested that details of the process envisioned to undertake such 

approvals be provided for ease of reference for the Fintechs. 

• The possibility of each test being insured for the purpose of 
consumer damage must be explored. RBI may also keep minimum 
capital aside to compensate for any loss for customer and to further 

contain losses for end consumer in cases such a situation arises. 

• The regulator should be prepared to modify current regulation if the 

regulatory sandbox evidence suggests as much. Further, if a product 
or a service works well, but calls for relaxation of extant regulation, 
that regulation should be available to it once it emerges from 

the sandbox and enters commercial deployment. 

• The sandbox should be designed to go beyond testing new 

products. Globally, the principal focus of sandboxes has been to allow 

testing innovative business models in ‘safe’ regulatory spaces. In the 

Indian context, an additional use case could be enabling the sandbox 

to assess the pros and cons (costs and benefits) of proposed 

amendments to current regulations for existing products as well. 

• The sandbox should enable the engagement of all financial 

regulators as an inter-regulatory unit. This is because technology is 
enabling innovations that result in hybrid products that fall under the 
ambit of multiple regulators. Entrepreneurs face the challenge of 

identifying the relevant regulations and fully understanding the 

implications for their business. Examples of such products can be 

payment plus pension products (potentially involving RBI and 
Pension Fund Regulatory and Development Authority) or savings 

cum insurance products (RBI and Insurance Regulatory 

Development Authority) delivered over the mobile phone. In Hong 
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Kong for example, the sandboxes of the Hong Kong Monetary 
Authority, the Securities and Futures Commission and the Insurance 
Authority are linked, so that there is a single point of entry for pilot 
trials of cross-sector fintech products. 

• The entity which develops a successful product/process out of the 
RS, should be permitted exclusive right of usage/marketing etc for a 
certain period as defined by the regulator. Post the defined 
period/cooling period, the product/process can be opened up to the 

broader market participants. 

7 

We are supportive of the RBI’s proposed regulatory sandbox 
initiative. We welcome the greater avenue for discourse between 
industry participants and the regulator that the sandbox will provide, 
especially in such a fast-moving area of development. 

However, we note that Sections 5 and 6.5.1 of the proposal outline 
that the target applicants for entry are ‘FinTech firms which meet the 
eligibility conditions prescribed for start-ups by the government’. We 
request that the RBI consider whether the regulatory sandbox should 
be made available to a wider selection of firms beyond start-ups, as 

innovation is not limited to start-ups. One of the purposes of the 
sandbox is to gain regulatory clarity and this is as relevant for an 

incumbent as it is for a start-up. It is also not uncommon for innovation 

to come as a result of cooperative efforts between start-ups and 

incumbent firms that fall outside the definition of ‘start-up’. Incumbent 

firms are also thinking through how they can innovate and use new 
technology to increase efficiency safely, which can ultimately benefit 
consumers. Therefore, we query whether the sandbox should be 

available to such efforts and incumbent firms that may not fall cleanly 
within the parameters outlined in section 6.5.1. We note that 
regulatory sandboxes set up in other jurisdictions do not have similar 
entity restrictions: for instance, the UK Financial Conduct Authority’s 
regulatory sandbox is open to authorised firms, unauthorised firms 

that require authorisation and technology businesses, while the 
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Monetary Authority of Singapore (MAS)’s sandbox targets but is not 
limited to financial institutions, FinTech firms, and professional 
services firms partnering with or providing support to such 
businesses. 

With reference to Section 5i, we would request that the RBI include 
mention of absence of or lack of clarity in” governing regulations, as 
it may be that the sandbox is required where there are regulations 
present, but it is unclear how the existing regulatory perimeter might 
apply to a new product. 

With regard to Section 6.1, the outlined proposal to run the sandbox 
in cohorts is similar to that of the FCA’s. However, where this differs 
is the intention to run the cohorts thematically, e.g. financial inclusion, 
payments and lending, and digital KYC. However, sandbox 
applicants may cross themes, e.g. a product may aim to improve 
financial inclusion via ease of lending or digital KYC. We would query 
how such a cross-theme product would be classed, as new innovative 
products may not be neatly categorised by theme. Limiting regulatory 
support thematically may introduce impediments to innovation, as 
encouraging multiple solutions to one issue, e.g. digital KYC, might 
lead to duplication, stops market participants from learning from 
another s experiences in the sandbox ahead of development, and 
may distort competition for those granted entry compared to those 
that do not make it. We refer the RBI to the FCA's sandbox, where 
the cohorts are not limited by theme. 

With regard to 6.1.1, the proposal has a list of activities that can be 
sandboxed and a list which cannot. One key notable omission is 
Credit Information and Credit Registry. This is one area where 
Fintech solutions, especially those with Artificial Intelligence, can help 
provide solutions for e.g. early warnings to Banks, which can help 
improve NPA’s, etc. We propose that Credit Information and Credit 
Registry be moved in the positive list for Sand box testing. Trade 
■inance is another area which may be considered 
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With reference to Section 6.3, certain products/services/technology 

are explicitly singled out as an indicative negative list which may not 

be accepted for testing. While we commend the RBI for providing 

clear guidance on its intentions, we would recommend the removal 

of such an explicitly worded negative list which could dissuade or 

hinder innovation in these areas, and suggest that section 6.3 should 

be limited to, as the RBI has already outlined in section 6.3, the 

requirement that the applicants must demonstrate that a different 

technology is gainfully applied in an existing area or where the same 
technology is being applied differently. 

In section 6.5.3, we would request the addition of the words “or 

guidance” after the words “for which relevant regulation”. 

We welcome the RBI’s focus on consumer protection and agree that 

while testing with live consumers are key to the development of a 

product, such consumers must be informed of the risks of a new 

product. We would therefore recommend that in section 6.9, the RBI 

also consider going beyond this, and include the additional 

requirement for sandbox entities to not just notify customers of the 

potential risks of a new product, but also include in the notification 

that it is operating in a sandbox. 

We would request RBI to clarify if Banks are obliged to service 
sandboxed initiatives. If so, will Banks be offered any assistance/ 

support/ guidance when dealing with potentially unique and diverse 
Sandbox use cases. In such cases, would any limitations or 
exceptions be offered to banks when clients are operating within the 
sandbox. For instance, if a sandboxed company used the Bank 
services in a way that would ordinarily be outside of permitted 

regulation, would banks be obliged to report or will the sandbox 
exemptions extend to Bank services 

Finally, we highlight the importance of international collaboration 

between the RBI and other regulators, both domestically and 

internationally, given that technology is increasingly cross-sector and 


21 






Entity No Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 

borderless. We refer to the RBI to Hong Kong's Fintech Supervisory 
Sandbox structure, which spans three regulators (the Hong Kong 
Monetary Authority, the Securities and Futures Commission, and the 
Insurance Authority), and is linked up so that there is a single point of 
entry to the sandboxes for pilot trials of cross-sector fintech products. 
We call for the RBI to work closely with other Indian regulators, as is 
the case in Hong Kong. 

We would also welcome RBI joining the Global Financial Innovation 
Network (GFIN) once its sandbox guidance is published and the 
initiative is live. 

8 This is with reference to the Draft Enabling Framework for Regulatory 

Sandbox which was posted by RBI for comments. 

Please find attached the comments and views on the same from 
Entity 8 



Entity 8 would be keen to personally depose these points to RBI if so 
required. 

Looking forward to your kind consideration of this representation. 
Entity 8 welcomes the introduction of RBI’s regulatory sandbox which 
sets the stage for more innovations. Entity 8 believes that the 
sandbox is bound to reduce the number of failures, bring 
new products to market and draw positive interest of investors at an 
early stage of organization. This creates far more stable start-ups 
who can now look at next 5 years’ picture and visualize the new 
business models that will transform Indian financial sector. 

However, it is suggested that the established players also be given 
access as they are also working on the innovation agenda. The 
rationale being that the industry as a whole will benefit from the 
findings of operating in a controlled environment. 

Globally, regulatory sandboxes have been introduced in many 
countries including UK, Singapore, Hong Kong & now, India. Different 
kind of sandbox approaches have been taken in different countries. 
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UK & Singapore facilitate testing per case basis while Australia offers 

open sandbox which is applicable to all, with an option to customize 

for special cases. The regulators in UK discuss terms of product 

testing on an individual basis depending on the type of project, testing 

goals and existing risks. India has adopted the approach to test on a 

case by case basis, similar to UK’s. With such an approach, it needs 

to be seen how fast the cohorts are formed and that innovators do 

not face any biased judgement with respect to entering the testing 

process. 

The exclusion of innovations around alternate credit data needs to be 

relooked at as alternate data is a core component for driving the 

financial inclusion agenda. The draft framework proposes to create a 

negative list of products/ services/technology which may not be 

accepted for testing which includes 'Credit information'. This inhibits 

entrepreneurs using/developing alternate means and models for 

assessing credit worthiness from accessing the Regulatory Sandbox. 

It is a grim reality that even today, India remains under-penetrated in 

access to finance. 

Entrepreneurs working on developing new models for assessing 

credit worthiness of customers using available information must be 

provided access to the Regulatory Sandbox. The draft guidelines also 

pave the way for e-contracting, easier KYC & repayments as well as 

assisted digital delivery in retail assets. In such a scenario, what 

becomes important is maintaining confidentiality of customer’s 

information (e-KYC, Cyber security processes), prevention of money 

laundering (market place lending, money transferring service, wealth 

management etc.) and countering the financing of terrorism. RBI may 

also keep minimum capital aside to compensate for any loss by the 
customer. Additionally, for processes like video KYC, there are no 

clear guidelines, and everyone is experimenting through different 

methods. It can come under scrutiny of the regulator, any day. Hence, 

this needs validation from a regulatory point of view, while keeping 
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customer’s confidentiality in mind. Thus, there’s a need to test such 
innovative KYC techniques. Also, there are concerns over 
confidentiality disclosure requirements. Start-ups, by being a part of 
regulatory sandbox bestow on RBI the right to publish any report / 
data related to their innovation. Such a provision may discourage real 
innovators from being a part of the sandbox as their moats around 
technology could become untenable. Therefore, to ensure vibrancy 
of the program and maximum participation, Entity 8 proposes RBI 
should relook at the confidentiality provision. 

Finally, there are concerns over the selection and fit criteria for 
selecting cases for the regulatory sandbox platform. There are 
multiple examples from past which tell us that innovation can come 
from unexpected places, and it is highly likely that in the Indian 
context it comes from a hostel room of an academic institute like IITs 

or NITs. 

Unfortunately, many of these student-innovators maybe excluded 
from the sandbox due to the fact they have never taken a loan and 
so may not have any CIBIL or credit bureau score to their name. 
Therefore, we propose that credit score proviso should be removed, 
while retaining other criterion which may ensure that only fit and 
proper entities apply for the sandbox. 

RBI has also outlined other conditions like the entity in question 
having a minimum networth of 50 lacs has also been articulated. As 
some innovators may not have a credit score due to genuine reasons 
we propose that credit proviso be removed, and networth requirement 
be kept. Such an arrangement would be inclusive while ensuring that 
only genuine entities apply for the sandbox. 
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Please find attached our comments and feedback on the draft 
guidelines on Regulatory Sandbox for Fintechs. 



If given an 

opportunity, we shall be happy to participate in any stakeholder 
discussions or present further international comparative features and 
processes for the proposed sandbox. 

1. Fintech Scenario in India 

Fintech, short for Financial Technology, is the umbrella term used to 
describe the different models of application of technology in financial 
services. As an industry, it has witnessed a significant spike in 


popularity owing to great technological advances along with a 
positive response from the market. A large majority of global banks, 
insurers, and investment managers are planning to partner with 
financial technology companies over the next 3-5 years, and expect 
a 20% average return on investment on their innovation projects. 
Infrastructure-based technology, through platformification and open 
application programming interfaces (APIs), is reshaping the future of 
the financial services industry, while the operational advancements 
offered by robotic process automation (RPA), chatbots, and 
Distributed Ledger Technology (DLT) are enabling greater agility, 
efficiency, and accuracy. Through innovative use of technologies, 
financial technology companies are delivering low-cost personalized 


products, which has a significant impact on the rising customer 
expectations, along with mounting pressure on traditional firms. 

In India, the financial services sector has seen a new wave of 
participants, including Fintech start-ups offering digital payments, 
remote lending, microfinance, etc., and various other e-commerce and 
technology firms, alongside incumbent financial institutions. Fintech 
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would drive 5x more employment, increase MSME contribution to the 
GDP by 10 percentage points by 2022. The number of direct jobs 
created per crore of investment in Fintech industries is thrice the number 
of direct jobs created per crore of investment in the traditional industries 

1.1. Market Share of Fintech 

The Global fintech market's transactional value's CAGR is 8.6% over 

the forecast period of 2019-2024.Global fintech funding rose to USD 
111.8 billion in 2018, up 120 percent from USD 50.8 billion in 2017, 
fuelled by mega M&A and buyout deals, according to the KPMG 
Pulse of Fintech report.2 The Indian economy which was traditionally 
cash-driven has responded well to Fintech. The transaction value of 
the Indian Fintech sector was estimated to be approximately USD 33 

billion in 2016 and is forecast to reach USD 73 billion in 2020 growing 

at a five-year CAGR of 22%. 

1.2. Legal Compliances for Fintech Companies 

1.2.1 RBI Report on Fintech 

The Reserve Bank of India, in July 2016, set up an inter-regulatory 
Working Group (WG) to look into and report on the granular aspects 
of Fintech and its implications for the financial sector so as to review 
and reorient appropriately the regulatory framework and respond to 
the dynamics of the rapidly evolving Fintech scenario. The Group 
included representatives from the Reserve Bank of India, Securities 
Exchange Board of India, Insurance Regulatory and Development 
Authority, and Pension Fund Regulatory and Development Authority, 
from select financial entities regulated by these agencies, rating 
agencies such as CRISIL and Fintech consultants / companies. The 
Group released the Report on November 23, 2017 on Fintech and 
Digital Banking (‘Report’). Among other things, the Report expounds 
on the various aspects of Fintech innovations such as the use of 
Blockchain, digital currency, emergence of Regulations Technology 
as a sector etc. The Report further provides a roadmap for 
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prospective Sandbox Regulations. Recommendations in respect of 

data security, Human Resource Management, etc. are also included. 

1.2.2 Information Technology Regulations 

Information Technology Act, 2000 (‘IT Act’), provides for transactions 

carried out by means of electronic data interchange and other means 
of electronic communication. Under the aegis of the IT Act, the 

Information Technology (Reasonable Security Practices and 

Procedures and Sensitive Personal Data or Information) Rules, 2011, 

lays down the standards to be complied with for collection, disclosure, 

transfer and protection of sensitive personal data or information. 

Corporates are required to establish and follow reasonable security 

practices and procedure, provide a policy for privacy and disclosure 

and obtain permission of the owner before disclosing any data to a 

third party. Information Technology (Intermediary Guidelines) Rules, 

2011, which lays down the compliances to be followed by an 

‘intermediary’ - someone who in respect of an electronic records, 

receives, stores or transmits that record or provides any service with 

respect to that record, on behalf of another person - requires an 

intermediary to publish the rules and regulations, privacy policy and 

user agreement for access-or usage of the intermediary's computer 

resource, inform its users at least once a month that any non- 

compliance with the rules and regulations, privacy policy and user 

agreement by a user will lead to termination of the right of the users 

to use the intermediary’s computer resource, establish a company 

and permanent base in India and report any cyber security crimes to 

the Indian Computer Emergency Response Team. 

1.2.3 Anti-Money Laundering Norms 

The Prevention of Money Laundering Act, 2002 and related rules 
which require the Reporting Entities to record and preserve details of 

the transactions and to furnish information to the appropriate 

authorities whenever needed. 

1.2.4 Cross Sectoral Regulations 
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Owing to the innovative nature of fintech companies there is alsolT 
possibility that they may be regulated by more than one regulatory 
authority. Some cross sectoral regulatory possibilities are as provided 
below. Strict reporting requirements and penalties for non-reporting 
are also imposed on the Reporting Entity. 

2. Regulatory Sandbox 

A regulatory sandbox is a regulatory approach that allows live, time- 
bound testing of innovations under a regulator’s oversight. Novel 
financial products, technologies, and business models can be tested 
under a set of rules, supervision requirements, and appropriate 
safeguards. A sandbox creates a conducive and contained space 
where incumbents and challengers experiment with innovations at 
the edge or even outside of the existing regulatory framework. A 
regulatory sandbox brings the cost of innovation down, reduces 
barriers to entry, and allows regulators to collect important insights 
before deciding if further regulatory action is necessary. A successful 
test may result in several outcomes, including full-fledged or tailored 
authorization of the innovation, changes in regulation, or a cease-and 
desist order. The first regulatory sandbox was launched in 2015 in 
the U.K. and generated great interest from regulators and innovators 
around the world. At the beginning of 2018, there were more than 20 
urisdictions actively implementing or exploring the concept. 

2.1 International Scenario 

2.1.1 United Kingdom 

The United Kingdom was the first country to set up a regulatory 
sandbox, in May 2016, as part of Project Innovate, an initiative 
promoted by the Financial Conduct Authority to help encourage 
innovation in the interest of consumers, and to promote competition 

among financial services providers by supporting disruptive 
innovation. 

According to Financial Conduct Authority (FCA) estimates, the UK 
hosts about 50% of total European disruptive FinTech, and creation 
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of an appropriate regulatory framework is a necessary condition to 

remain Europe's leading FinTech Hub. 

The UK models rests on entry subject to approval through an 
application process that takes place twice a year. 

The first cohort of applications took place by mid-2016, and 24 
companies were accepted to the sandbox out of the 69 companies 
that applied; 

A second cohort was called at the beginning of 2017, and 31 
companies met the sandbox eligibility out of 77 submissions. 

• According to FCA, while in the first cohort the majority of firms were 
based in London, the range of firms in the second cohort is much 
more diverse in geographic origin, as well as in sectors of activities. 
The FCA bases its approval process on several factors including the 
ingenuity of the innovation, benefit to consumers, readiness of the 
product to be tested, and need of guidance for the testing process. 
2.1.2 Australia 

Shortly after the UK, Australia pursued its own initiative by setting up 
a Sandbox as a natural extension of the ASIC (Australian Securities 
and Investments Commission) Innovation Hub. A key feature of the 
proposal is reducing, during a fixed period of time, some of the 
requirements (such as financial resource requirements, or relevant 
managerial experience) which might be challenging for and impede 
start-ups. There are significant differences between the UK and 
Australian models on which sandboxes rely, the most important one 
being about ease to enter the sandbox. 

At the other end of the spectrum, the Australian sandbox does not 
rely on the regulator selecting applicants and negotiating individual 
esting terms. On the contrary, it rests on a “white-list” approach 
whereby all companies that fit certain criteria are automatically 
allowed to validate their concepts without having a license. 
Companies in the sandbox are, however, required to let it clear to 
customers that they are not authorized/licensed and are operating 
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under temporary licensing exemption. Many financial centres have 
followed the lead open by the UK and Australian initiatives, among 
them Singapore, Indonesia, Malaysia, Thailand, or Hong Kong in 
Asia; while in Europe initiatives have been recently launched in 
Switzerland and the Netherlands. Next table, taken from a recent IMF 
report, summarizes the main operational aspects of them. 

2.1.3 Malaysia 

Bank Negara Malaysia (BNM), Malaysia’s central bank, was one of 
the earliest regulators after the FCA to implement a regulatory 
sandbox. The first four participants in the sandbox commenced 
testing in early 2017 (currently at six participants as of September 
2018.) These include WorldRemit, a remittance service who tested 
an online customer identification technology incompatible with 
existing KYC regulations and is now used in Malaysia after the 
company’s successful exit from the sandbox. 

Key Features: 

• Eligibility requirements explicitly mention financial inclusion 
objectives 

• It is also required that the proposed innovation be ‘wholly or partly 
incompatible with laws, regulations or standards' administered by 
BNM with relevant regulatory flexibility considered for innovations 
which possess ‘strong value propositions.’ 

2.1.4 Mauritius 

The 'Regulatory Sandbox License’ (RSL) of Mauritius is operated by 
the Economic Development Board (MEDB). As of January 2018, the 
Mauritius sandbox had at least five participants with two providing 
blockchain and cryptocurrency-based solutions with others providing 
non-financial innovations. 

Key Features: 

• RSL is available for 'innovations’ generally and not limited to 
financial products and services 
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• Decisions to accept an applicant is made by the MEDB, the 

sandbox operator, with the input of the appropriate regulator who 
acts as part of a Technical Committee providing substantive 
evaluation, advice and recommendations concerning applicants. 

2.1.5 Thailand 

The Bank of Thailand (BOT) launched its regulatory sandbox in 
December 2016 for banks and nonbank financial institutions (NBFIs) 
incorporated in Thailand who offer products related to lending, 
payments and fund transfers. As of February 2018, the sandbox had 
four participants providing solutions using blockchain technology for 
letters of guarantee, international remittance services and biometric 
identification systems. A project standardizing QR codes for domestic 
and cross-border payments was successfully tested using the 
sandbox by eight banks and financial institutions and was 
subsequently deployed in the market. 

Key Features: 

• Pre-existing regulated entities go first, then suitable FinTech’s 
afterward 

Three out of the four companies approved by the BOT include the 
use of blockchain for letter of guarantee and cross-border transfer 

2.1.6 ASEAN Financial Innovation Network (AFIN) 

An initiative of the IFC, MAS and ASEAN Bankers Association, AFIN 
is a regional industry sandbox promoting innovation and collaboration 
between regional banks, NBFIs, microfinance institutions and 
FinTech innovators with an emphasis on financial inclusion. 
Ultimately it is a multi-jurisdictional effort to create a cloud-based 
virtual sandbox where banks and FinTechs can jointly test 
applications to solve similar industry problems, such as customer 
onboarding and alternative credit scoring. 

Since banks and institutions in developing countries have limited 
resources to develop solutions to reach the underserved, 
Dartnerships like those facilitated by the AFIN sandbox can further 
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tfinancial inclusion by reducing costs for individual institutions. AFIN 
j plans to collaborate closely with MAS and other regulators, providing 
them with an opportunity to better understand challenges faced by 
FinTechs and initiate policy harmonization within the ASEAN region 
| which, in turn, can further business and investment opportunities 
| In September 2018, AFIN announced the launch of its API Exchange I 
CAPIX’) consisting of a FinTech marketplace, collaborative industry 
sandbox environment and adoption of APIs ‘to drive digital 
j transformation and financial inclusion across Asia-Pacific. 1 AFIN also 
| entered into a partnership with ADGM to expand the reach of APIX 
| beyond ASEAN borders. 

I Key Features: 

j • FIs and FinTech firms to connect to one another through a globally 
curated marketplace; 

[ • Collaborative experiments in a sandbox among financial industry 
participants; and 

j Adoption of APIs to drive digital transformation and financial 
I inclusion across Asia-Pacific. 

2.1.7 Industry Sandbox (UK) 

Pursuant to FCA invitation, Innovate Finance originally chaired an 
industry-led consultation (and resulting report) to explore an industry 
; sandbox environment, producing synergies from a collaborative 
I 'shared off market development environment' for financial innovation. 

| Project objectives include providing the UK FinTech ecosystem with 
| common access to valuable resources (such as a data exchange and 
open APIS), using collaboration to solve complex problems and 
promoting regulatory efficiency through the involvement of regulators 
as observers. The Industry Sandbox Consultation Report includes 
comments recognizing how industry sandboxes can benefit 
| innovation (and the process) and positively impact on consumers, 
_| advancing financial inclusion goals and can also supplementing the 
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data sets on important issues. Findings of the Consultation Process^ 

were as follows: 

Open to the whole of the ecosystem on a voluntary participation 
basis; 

Connected to shared testing environments and different proprietary 
sandboxes; 

Accessible via clear eligibility requirements and as low barriers for 
participation as are economically feasible.7 
Industry Sandboxes participation ranges from: 
o Users of the sandbox resources; 
o Contributors of the sandbox resources; 
o Sponsors of the sandbox; 
o Observers of the sandbox outputs. 

FinTech start-ups, financial institutions, technology and data 
vendors, professional services firms, and venture capital funds can 
all be users, contributors or sponsors of Industry Sandboxes (or a 
combination of these roles). Regulators, academia and professional 
membership bodies can participate as observers or, where relevant, 
enablers in secretariat or research functions. 

Industry Sandboxes could have the following components: 
o Application assessment mechanism allowing users to self-certify 
their eligibility for access, supported by case worker review where 
necessary; 

Data sets of as wide and varied nature as feasible, including 
market, product and consumer transactional data provided data 
privacy standards are met. Such data can be synthetic, historic, 
delayed or live market data, or anonymised transactional data. 
Data architecture should allow for both structured and 
unstructured data, with the ability to layer analytics. Enabling 
access to sample sizes live data from volunteer consumers was 
left to further review; 
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^ rm ' ssl0ns for data access should be managed by the data 
provider, while the Industry Sandbox develops a registry of 
available data assets and collects meta-data on their usage; 
o Reference architectures providing users with a set of domain 
specific artefacts, design patterns and terminology that describe 
successful operational architectures, thus facilitating multiple 
parties coming together to interoperate and solve new problems 
at a business and technical level; 

> Product Certification providing industry-level assurance that 
solutions tested in the sandbox confirm to existing national or 
international industry standards, best practices defined by 
competent bodies; or emerging standards agreed at sandbox 
level. Certification should be voluntary, time-bound, transparent, 
and reflective of the product maturity; 

Showcase space allowing solutions tested in the sandbox to be 
easily and digitally accessible by observers anywhere - 
Advisory space connecting sandbox users with interested 
providers of professional sendee advice, particularly with regard 

to regulatory compliance and readiness to integrate with legacy 
systems; 

Analytics and audit tools allowing understanding and 
transparency of how sandbox assets are being used; 

Participants' Forums providing a dedicated communication 
collaboration and feedback channel for each participant type. 
Forums can be both digital platforms and physical meetings 
Industry Sandboxes could engage with regulators in order to: 
o Engage in curated dialogue with sandbox participants; 

O Review Industry Sandbox tests in applications to’ regulatory 

sandboxes; 

o Test RegTech solutions for regulators; 
o Feedback into policy development. 
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O Industry Sandbox could have simple and flexible governance 

structure providing for neutrality, robust management of the rights 
and obligations of participants, and compliance. They would be 
set up as non-for-profit structures. Industry Sandboxes could be 
funded through a combination of subscriptions, sponsorship and 
benevolent funding. Their cost would vary significantly based on 
the sophistication of the environment constructed. 

Implementation Choices 

Based on the identified design and governance requirements, an 
Industry Sandbox can be as simple as a catalogue of existing 
open datasets or APIs or as complex as a fully-fledged digital 
platform for managing access to market and institutional data and 
conducting collaborative research and development. An Industry 
Sandbox could also be generic or dedicated to a specific industry 
challenge. 

Implementation Choices would vary between organisations taking 
an Industry Sandbox forward. 

2.1.8 New Payments Platform (NPP) API Sandbox 
NPP Australia (the national real-time payments service) has 
partnered with The Society for Worldwide Interbank Financial 
Telecommunications (SWIFT) to provide a cloud-based “APIs and 
box to enable innovators to learn, test and experiment with the NPP 
API Framework and integrate NPP payments functionality into their 
own products and services. 

Key Features: 

This testing environment will enable third-party service providers, 
software developers and participating financial institutions to test and 
see the NPP’s benefits and capabilities in a way that will ensure 
interoperability and consistency, regardless of the type of innovation 
they are focused on. 
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"Developers looking to understand the capabilities of the NPP will be 
able to build and test NPP-based solutions in an environment that's 
independent of the actual platform 

2.1.9 The Global Financial Innovation Network (GFIN) 

It represents a network of 29 financial regulators and related 
organizations exploring the potential for a global sandbox. Pertinent 
to developing countries. GFIN calls for a channel of cooperation 
between financial regulators, assisting them with addressing 
common challenges and developing the capacity and knowledge of 
their staff. It also provides a platform for firms to interact with 
regulators, opportunities to scale ideas across borders and to reduce 
time to deploy products and services to the international market - an 
incentive which may attract more innovators into the sandbox. 

Key Features: 

• Each regulator will have its own individual screening criteria, areas 

of interest, ability to support certain activities, and will be responsible 

for ensuring that appropriate safeguards for their jurisdiction are in 
place. 

• Firms that wish to participate in the six-month pilot phase must meet 

the application and regulatory requirements of ail the jurisdictions in 
which they would like to test 

2.2 Analysis of the probable impact of Sandbox on India’s Landscape 
2.2.1 Impact on the Financial Services Sector 
Regulatory Sandbox would benefit FinTech companies by way of 
reduced time to launch innovative products at a lower cost. FinTech 
has the potential to reshape the financial services and financial 
inclusion landscape in India in fundamental ways. It can reduce costs 
and improve access and quality of financial services. There is a need 

to strike a subtle balance between effectively utilising FinTech while 
minimising its systemic impacts. 

It is essential for banks to explore the possibility of establishing new 
allia nces with FinT ech firms as it could be pivotal in accelerating the 
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Tagenda of financial inclusion through innovation. It is essential that 

| flow of investments to this sector is unimpeded to realise its full 
potential. It is imperative to create an ecosystem which promotes 
| collaboration while carefully paying attention to the implications that 
it has for the macro economy. 

I India has been at the forefront of this revolution, he said, a recent 
global survey ranks India second in terms of FinTech adoption, with 
I an adoption rate of 52 per cent. 

2.2.2 Impact on the Financial Inclusion and socio-economic 
indicators 

I It is reported that there are as many as 1,218 FinTech firms operating I 
in India which have created a large number of jobs and have 
generated a healthy appetite for investment. 

| To further deepen digital payments and enhance financial inclusion I 
j through FinTech the Regulatory Sandbox shall go a long way. 

I lndia s goal t0 achieve greater use of electronic payments so as to 
achieve a less-cash society, shall be accomplished by promoting i 
| innovations to create a payment system that combines the attributes | 
of safety, security, enhanced convenience and accessibility, 
leveraging technological solutions that enable faster processing. 

| Affordability, inter-operability, and customer awareness and 
j protection will also be achieved with regulatory sandbox. 

2.2.3 Impact of Sandbox on India’s Goals of Financial Inclusion 
j Using a regulatory sandbox may affect financial inclusion—and 
j specifically, digital financial inclusion—in several ways. Some effects 
| stem from general benefits are improving capacity of regulators to 
| deal with innovations and promoting competition—including between | 

| innovators and incumbents—with positive impact on pricing of I 
financial products and services. Other effects are specific to financial 
inclusion, such as promoting innovation that improves financial 
inclusion and improving capacity of regulators to balance financial 
I inclusion with other regulatory objectives. 
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3^®*aciTonlhJDSftGS^ 

3.1 Thematic Cohorts 

;::: ra , 61 , there * a men,i ° n ° f ^manc cohorts ^ on 

nc'al inclusion, payments and lending, digital KYC etc. This is an 

advanced version of the Regulatory Sandbox. The move is welcome 

however res,noting the cohorts to certain themes shall be of 

c ranee to the Fmtech players. The development of the themes of, 

s requires a level of maturity in the Fintech segment of the 

Whe . reby Clear delinea,i0 " ca " bo made in the various 

Fintecn I" S6rViCeS ‘ hat are CUrren ” y bSln9 ° ffered bV Vari ° US 

F ntech players. Without the knowledge on the current development 
of Fintech innovation, thematic cohorts shall ac, as banners to the 
entry of many Fmtech innovators. Themes for the cohorts can be a 
entenon but should no, be a mandate^ requirement forjudging the 
application. The regulator may a, „s discrebon create CuL re o 
simter fintechs with the same case manager for ease of study. 

3.2 Products under other Regulators 

in 6.1.11 there is a list of Innovative Products and Services. Since the 

ReTlatoV 3 """" ' 0r RnteCh " an initia “ Ve by the tanking 

Regulator the products related to trading, securities and insurance 

be able to be a part of the Regulatory Sandbox. There is 

possibility ,ha, there might be Fintech innovators who are developing 

products/services tha, involve banking and insurance or banking and 

securities features. In such a scenario i, is submitted that going 

fon-vard RB, should initiate co-operation agreements with other 
regulators for more effective study and regulation. 

3.3 Relaxations for Sandbox Applicants 

I" para 6.2 the regulatory requirements that shall be mandatory 
required by the applicants have been clearly mentioned. For the 
regulator requirements that can be relaxed i, is mentioned tha, i, 

—-— a case by case basis. It is suggested that a list of 
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regulatory requirements that can be relaxed can be provided just the^ 

way Monetary Authority of Singapore has provided. 

Examples of “Possible to Relax” requirement 
o Asset Maintenance requirement 
Board Composition 
Cash Balance 
Credit Rating 
Financial Soundness 
Fund Solvency and Capital Adequacy 
License Fee 

o Management Experience 
o Minimum Liquid Assets 
3.4 Umbrella Sandbox 

Fintech innovations have endless scope and possibilities in terms of 
product/service offerings. One of the main features of Fintech 
innovation is the possibility of development of products that have a 
cross border impact such as foreign remittance facilitation. In such a 
case a product which has cross border applications shall not be able to 
have its product/service tested in other jurisdictions which will dilute the 
test results. In this scenario we submit that RBI considers establishing 
an Umbrella Sandbox in collaboration with other South Asian countries 
so that the innovations can be tested on a broader scale. In the 
meanwhile, RBI can enter into agreements with other financial 
regulators for cross-border pilot testing of products. An Umbrella 
Sandbox initiative shall lead in greater cooperation with other 
jurisdictions as well as wider learning opportunities. Such initiatives are 
already being launched like FCA’s suggested model of Global Sandbox. 
This concept has immense scope and opportunities. 

In August 2018, the UK Financial Conduct Authority (FCA), together 
with a number of global financial regulators and related organisations, 
formed Global Financial Innovation Network (GFIN) with the objective 
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of providing a platform lor Innovative firms to better Interact with 
| regulators and trial cross-border solutions. 

In its latest announcement, GFIN said that a total of 44 unique 
applications were submitted across the 17 participating regulators for 

the cross-border testing pilot. It added that a high number of 

| applications also came from RegTech and cryptoasset focused firms. 

| 3.5 Type of Entity 

| Para 6.5.1(a) of the Draft states that, “The entity should beacompany I 
| incorporated and registered in India and shall meet the criteria of a 
| start-up as per Govt, of India, DIPP Notification No. G.S.R. 364(E) 

| dated April 11, 2018.” 

| By a strict interpretation of the provision contained therein, it can be 
| construed that an applicant should be both, a company incorporated 
| and registered in India and should meet the criteria of a start-up as 
| per Govt, of India, DIPP Notification No. G.S.R. 364(E) dated April 
11, 2018.The criteria for qualifying as a start-up as per Govt, of India, 

| DIPP Notification No. G.S.R. 364(E) dated April 11, 2018 is 
I reproduced below: 

I “( a ) An entity shall be considered as a Start-up: 
i. Upto a period of seven years from the date of 
I incorporation/registration, if it is incorporated as a private limited 
| company (as defined in the Companies Act, 2013) or registered as a 
| partnership firm (registered under section59 of the Partnership Act, 

| 1932) or a limited liability partnership (under the Limited Liability 
j Partnership Act, 2008) in India. In the case of Start-ups in the 
biotechnology sector, the period shall be upto ten years from the date 
I °f its incorporation/ registration. 

| ii. Turnover of the entity for any of the financial years since 
incorporation/ registration has not exceeded Rs. 25crore 
in. Entity is working towards innovation, development or improvement 
_| of Products or processes or services, or if itis a scalable business 


40 




Entity No 

Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 


model with a high potential of employment generation or wealth 

creation. 

Provided that an entity formed by splitting up or reconstruction of an 
existing business shall not be considered a ‘Start-up’.” 

It is humbly submitted the pre-condition given in Para 6.5.1(a) should 
be reconsidered. 

• RBI Working Group report mentions that the company can be a 
subsidiary of banking company. 

• NBFC and Payment Systems require fintech to enhance efficiency 
and reduce cost. 

• Hong Kong only allows fintech of regulated licensed entities such 
as banks and payment systems. No such restriction in United 
Kingdom and it is the most successful sandbox model internationally. 
We recommend: 

• Scale of entity can be limited 

• Number of clients and total client turnover can be used to ensure 
new products with limited market exposure avail sandbox 

3.6 Minimum Net worth requirement 

Para 6.5.1(b) of the Draft states that, “The entity shall have a 
minimum net worth of Rs. 50 lakh as per its latest audited balance 
sheet.” 

It is humbly submitted that the requirement of Rs. 50 lakh should be 
reconsidered. Read with Para 6.5.1(a), only a start-up company with 
a minimum net worth of Rs. 50 lakh and a turnover not exceeding Rs. 
25 crores will be able to be an applicant. 

• Expected net worth is too high. Regulated entities like full-fledged 
money changers (FFMC) with money transfer Service Scheme 
(MTSS) have this net worth requirement. 

• The net worth requirement discourages start-ups with an innovative 
product which do not receive investment prior to an application to 
enter the sandbox causing a regulatory hurdle for such start ups 
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For this purpose, we recommend that the minimum net worth criterion 
be relaxed to Rs. 10 lakhs. 

3.7 Conduct of Bank account requirement 

Para 6.5.1(d) of the Draft, the RBI requires applicants to show that 
:he conduct of the bank accounts of the entity as well its 
promoters/directors is satisfactory. 

The requirement is vague in nature. We request the RBI to kindly 
clarify the words “conduct” and “satisfactory”. We further request the 
RBI to specify the criteria to ascertain an unsatisfactory conduct of 
the bank accounts of the entity and its promoter/directors. 

3.8 Proof of Concept 

In para 6.5.7 it is mentioned that the applicants shall be required to 
share the results of the Proof of Concept/Testing of use cases. This 
provision has the chance of running counterproductive to the concept 
of Sandbox which is providing innovative players an access to the 
market. It is suggested that the PoC criterion can be relaxed on for 
certain cases if the fintech is able to show lack of access to market. 

3.9 Disclosure of Information 

It is submitted that RBI may obtain sensitive information of the 
participants during the term of the Sandbox. It is submitted that such 
information may be given in trust to the RBI. Further, companies may 
be apprehensive in sharing such information if they perceive that the 
information may be used against them at some point. For this 
purpose, we humbly recommend the following: 

a) Such information may not be used in a manner prejudicial to the 
interests of the company after such company exits the Sandbox. 

b) Such information may be excluded from the definition of “public 
documents” under the applicable laws. 

c) Such information may be excluded from any inter-agency or inter¬ 
departmental transfer or exchange of information. 
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d) Such information may be excluded from the “relevant information" 
sought to be published by the RBI on its website under Para 9 of the 

Draft. 

3.10 Decisions of RBI to accept to reject an applicant be made Non 

- Appealable 

Decision to accept/reject an applicant’s entry into the Sandbox be 
made non-appealable in any court, department or tribunal. It is 
submitted that the authorized body’s decision to either accept or 
reject an applicant’s entry into the Sandbox be made non-appealable. 
RBI must avoid being involved in litigations which may take up 
precious time of the RBI and may lead to interpretation of the 
Sandbox Framework by the courts. This resolution may be supported 
by the stand of the Hon'ble Supreme Court that courts shall not 
interfere in economic policy decisions unless a prima facie mala fide 
intention can be observed therein or there is injury to public because 
of dereliction of Constitutional or statutory duties by the government. 
In addition, the Supreme Court has also regularly stated that with 
regard to policies the Courts may not have the requisite expertise or 
knowledge of the subject matter to adjudicate a dispute. Hence, for 
this purpose, we recommend that a clause be added to the Sandbox 
Framework stating that decisions of the authorized body to accept or 
reject an applicant is non-appealable. 

10 

This is further to my appended email. PFA for the reference of the 
team consolidated comments from our side (2 set of comments 
provided by the Entity 10) on the draft regulations for the Regulatory 
Sandbox for the team’s consideration. Please do let us know incase 
of any further queries or discussions on the same; and we can set-up 

a call/ discussion session with the RBI team. 

Set 1: General comments on the background of the document: 

Under 3. Regulatory Sandbox: Benefits 
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1. Under 3.4, the regulator may still need to consult with internal or 

external technical experts as it learns about the different technologies 
in the sandbox. 

2. Under 4. Regulatory Sandbox: Risks and Limitations 

a) A key risk is the amount of time and resources that will be needed 
to run a sandbox. 

Further in addition to denoting liability on the entity, there should be 
proper safeguards so that the products are tested in a completely 
ring-fenced environment. 

3) Under 5. Regulatory Sandbox: Eligibility Criteria for Participating in 
the Sandbox 

a) The Eligibility Criteria given in the Framework says that the target 
applicants are Fintech firms. In case, any existing bank or NBFI’s 
technology arm/department want to test some new innovation, which 
can potential contribute to easing and positively effecting delivery of 
financial services, they could potentially be allowed to participate in 
RS. Most of the sandboxes around the world are open for startups as 
well for existing financial service providers. Section 3 of the 
Framework quotes “Incumbent financial service providers, including 
banks, also improve their understanding of how new financial 
technologies might work, which helps them to appropriately integrate 
such new technologies with their business plans. Innovators and 
FinTech companies can improve their understanding of regulations 
that govern their offerings and shape their products accordingly” but 
under the Eligibility section (#3) quotes that that “the target applicants 
for entry to the RS are FinTech firms which meet the eligibility 
conditions prescribed for start-ups by the government". Consider 
aligning the different areas in the document. 

b) Consider adding the following eligibility considerations to narrow 
down the field of applicants: 1) Products that have not already been 
introduced in the market, or existing products that have new features, 
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new delivery mechanisms, 2) Having some prototype developed and 

tested prior to entering sandbox. 

3. Under 6.1, in case of thematic cohorts, what would be RBI’s 

approach in case it receives several eligible applications for similar 

products or technologies? Will all of them be accepted in the cohort 

and what would be criteria of selection? 

4. Under 6.1.1 and 6.1.2 “Smart Contract” is listed under Innovative 

Products/Services (6.1.1), it should be part of the “innovative 

technology” section (6.1.2) as it is not a financial product but an 
underlying technology which can be applicable to many products. 

5. Under 6.2, the Regulatory Requirements that should be met, may 
possibly be included in the eligibility criteria as well, since applicants 

would need to demonstrate that these conditions would be met in 

order for applicants to be considered eligible. 

6. Further suggest to indicate that “Participants should maintain 

secure storage of and access to all data of consumers” (instead of 
only payment data of stakeholders) 

7. Under 6.3 Exclusion from Sandbox testing, is there a reason for 

excluding products related to credit information? 

8. Under 6.5 Fit and Proper Criteria: 

a) The current Framework is only for the Indian startups. In case, 

there are some foreign companies who are keen to test innovative 

technologies in India, the RS could consider adjusting the framework 
to allow innovation by adding conditions such as mandatory 
collaboration with an Indian Company etc. This model is followed in 

other sandboxes. 

b) Currently, the “test scenario and progress reports” is part of the Fit 

and Proper criteria (6.5), it should be ideally part of the application 
screening and evaluation stage. The applicant can be “fit and proper” 
based on innovation and lack of regulatory clarity. Reporting on the 

test etc. are generally part of the admission criteria’s/conditions and 

testing evaluation. 


45 






Entity No 

Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 


c) Under 6.5.3 — applicants may not be aware of the regulatory 
requirements, which is one of the main reasons they would come to 
the sandbox - for appropriate guidance. One of the objectives of a 
sandbox is to allow participants to understand what relevant laws and 
regulations apply and need to be complied with. Will all participants 
be provided with information on laws/regulations relevant to 
consumer data protection and privacy. 

9. Under 6.5.8, applicants may be requested to provide adequate 
consumer safeguards for risks anticipated. In addition, the framework 
could provide more clarity on “Consumer Safeguards”. Below are 
some of the examples: 

- Requirement to obtain consumer’s prior written consent to 
their participation in the test. 

- Requirement to add prominent statements in some or all 
communications to consumers informing them of their 
participation in the test. 

- Extra capital requirements such as ring-fencing funds to 
ensure redress to consumers should the test result in 
consumers suffering a financial detriment. 

- Extra requirements related to the Innovation’s handling and 
protection of consumer data. 

10. Under 7. The Sandbox Process and its Stages in a Regulatory 
Sandbox 

a) Under 7.2.4 the Test design phase is only for 12 weeks, it may not 
be adequate for some of the technologies to measure the impact they 
may have on the financial service deployment and usage. In most of 
he other Sandboxes, this stage is set up for minimum 6 months i.e. 
24. Test reports/results may show more accurate results especially 
covering the issues of consumer protection, privacy and 
.echnological defects etc., in case set up for a little longer period. 

b) Related to 7.2.4, we feel that the Evaluation (under 7.2.5) should 
not be separate, but a part of the Testing phase. While the applicants 
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are testing their products in the sandbox, the Fintech Unit or other 

dedicated Sandbox team would be monitoring their progress, any 
risks etc. Therefore, this would also take place over the entire 6 
months of testing. 

c) While 6.5.6 indicates that applicants should have an exit strategy, 
the Sandbox Process does not provide for an Exit Stage. The 
Sandbox Process may add an “Exit Stage" in the framework. While 
applicants/innovators should be providing their exiting strategies at 
the application stage, the exit stage should aim to lay out to process 
to follow in case of different exiting scenarios, for example: 

o In case of the test failure, process of meeting all arising obligations 
o In case of successful test, what conditions would need to be met 
to launch 

d) In case the results of any test eventually require a relaxation of a 
particular regulation or new enabling regulations, to enable full scale 
launch, what would be RBI’s approach/process in that case? 

11. Under 9. Disclosure, while the Framework clearly lays out RBI’s 
right to disclosure, it may be useful to add guidance on how 
successful applicants/innovators can use the Sandbox related 
information on Innovator’s respective websites or other 
communication channels. RBI may set up a process to vet all the 
communications related to the Sandbox entrant (related to RS) to 
safeguard public from any miscommunication on the part of the 
innovators/applicants. 

Set 2: 

There are some areas as noted below that will benefit from some 
more clarity on the guidance: 

Objectives: 

- The objectives of the sandbox might benefit from a bit more 
clarity. They say that it is to ‘ test new products, services or 

business models.that address a problem, or bring benefits 

to consumers. This is fine, but the RBI should consider 
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tightening this and bringing it more in-line with its objectives as 
a regulator. For eg. The UK sandbox is particularly created to 
increase competition which is its secondary objective or the 
MAS only uses the sandbox to support firms that do not have 
a current regulatory FM neatly applicable to them- hence 
directly inline with its role as a supervisor. 

I Eligibility and admissibility criteria: 

- RBI has opened up the sand-box purely to start-ups, and this 
has a potential to create an unlevel playing field and tends to 
look at regulation at the level of the entity and not the activity 
which should be the direction we are moving toward. I 
Moreover, incumbents and those firms that potentially provide 
services/support to fintech firms should also be allowed to 
participate in the sandbox, especially if it is for an activity that 
does not currently have regulation or an activity that supports 
the theme that is being targeted. 

- Another reason that supports the opening up of the sandbox 
to incumbent firms is to facilitate partnerships- which could be 
an objective of the sandbox exercise. 

- The note mentions that start-ups above a net worth of Rs50 
lakh and with requisite IT infrastructure only ‘if the proposed ' 
fintech solution should highlight an existing gap in the 
financial ecosystem and demonstrate how it would address 
the problem’. Is this the most appropriate way to identity an 
eligible firm? - focus could be more on the existence of a 
minimum viable product (MVP) and the readiness to deploy 
than on the net worth of the firm. 

State of the firm while in the sandbox 

- The document could be clearer on the auspices under which 
the eligible firm is operating under when in the Sandbox. Does 

_| jt 9©t a ‘fintech license’ of sorts or does it have a conditional 
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license that may or may not convert into a full license at the 

end of the testing period. 

- Although the note, explicitly mentions that legal waivers will 
not be permitted it does make mention of regulatory 
relaxations. What kind of regulatory relaxations are allowed? 
E.g. include reduced capital requirements etc. It is noted in 4.2 
that it will follow ‘well-defined principles in decision-making’ 
however this is open to interpretation and could be seen as 
creating an un-level playing field. 

Evaluation and Impact Analysis 

- In the interests of transparency, a clear indication of ‘what 
success looks like’ should be drawn out. 

- How will this be fed back to the market or even be used to 
improve the functioning of the sandbox itself. 

Risks and Mitigating measures: 

- The risks and limitations are only explained from the view of 
the firm. The risks that the RBI themselves or importantly risks 
to the consumer like privacy of data have not been mentioned 
here. 

Exit strategy 

An Exit strategy for a sandbox normally has 3 conclusions and they 
should be considered in the document: 

o Cease and Desist: To stop the functioning of the firm and 
ensure there is an orderly wind-down esp. with customer 
liabilities 

o Full license: to enable the firm to apply for a full license. 
(Please note that this is only applicable in those cases that, 
allow firms that already have regulations that pertain to 
them to operate in the sandbox.) 
o Initiate a change of regulation. 

Relationship with other regulators: 
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Especially in light of the IRDAI sandbox as well as the 
imminent SEBI one, as the important point that a number of 
the fintech companies rarely work in only one vertical (i.e 
payments or lending) but tend to cross into a number of the 
different verticals as the business matures hence falling under 
the regulatory jurisdiction of potentially more than one 
department or regulator. 

An inter-regulatory working group will be a good forum for 
exchange. 

Other comments: 

- The benefits of the sandbox mention feedback from the 
customer being used to influence both the regulator and the 
innovator. How is this feedback going to be 
collected/monitored? 

- The paper could provide more information on what may/may 
not be published publicly. For e.g. in UK, the results of the 
Proofs of concept would be published publicly on the 
Regulator website. 

- Further the FCA lists all the companies that are admitted into 
the sandbox, while the DFSA (Dubai) does not- they have both 
clear reasons for why they have chosen that path. 

- Other than the for the regulatory relaxations that the regulator 
provides, there does not appear to be any support mentioned 
(e.g.- continued supervisory support etc.) that the sandbox 
provides to the firms. 
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we see the proposed framework to implement a regulatory sandbox 
as very welcome and opportune. We thank you for the opportunity to 

comment on it and have attached these comments for your 
consideration. 

We look forward to the opportunities that the proposed Sandbox will 
provide to accelerate growth in financial services, especially within 
the financially excluded sector. 


Refere 


nces 


6.2 


Provisions 


Regulatory 

Requiremen 

ts/ 

Relaxations 
for Sandbox 
Applicant 


Comments 


Globally, we have seen RS’s have a 

mandate to relax both statutory and 
regulatory requirements. This has been 
successful in creating a conducive 
environment to test new business models in 
a safe and secure manner before rolling 
them out at scale. 

From an RBI perspective, we see this as an 
opportunity to facilitate low cost learning of 
non-Indian resident innovations that may 
have significant application to the Indian 
markets. FinTechs would not need to 
comply with all statutory requirements, 
before entering the sandbox to test, 
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reducing the barriers to leveraging the 
sandbox for learning. 

Other than the requirement that is 
specifically requested from the FinTech to 
be exempt from, this will not preclude the 
FinTech from complying with all other 
statutory and regulatory requirements of 
delivering that financial service in India. 

6.4 

Number of 

FinTech 

Entities to 

be Part of a 

Cohort 

A clarification may be provided on the 

composition of the Cohort. While it is 
mentioned that the RS shall begin with IQ- 
12 entities, it is not clarified whether this is 

the overall number for the sandbox or the 

number per cohort for each of the thematic 
areas such as financial inclusion, payments 
and lending and digital KYC, etc. 

We would also submit that communication 
regarding the anticipated timing and 
regularity of the cohort intake (after the first 
intake) would assist users when planning to 
enter the RS to test new functionality. This 
may clarify accessibility to the RS for 

potential users who have been excluded 

from the initial cohort, or are not in the 
position to submit an application timeously 
for the first cohort application. 

7.2.4 

Testing 

(12 weeks) 

It is understood that a Company in the 
regulatory sandbox shall effectively operate 
for a period of 12 weeks, and the other 

stages will account for administrative and 

assessment purposes. 
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It is submitted that a period of 12 weeks 

may be too limited for a company to prove 
the impact of the solution with the 
concomitant relaxations in policies. For 
example, long term lending solutions or 
leveraging new-to-market Machine 

Learning capabilities to prove credit scoring 
accuracy for consumers may require a 
longer sandbox period to evaluate the 
potential risk of the new solution. 

Furthermore, in order to allow a Company 
to enable multiple stages of test & learn 
without re-applying to the RS (with the 
concomitant risks associated with not 
receiving approval back into the sandbox), 
Companies may benefit from testing for 
more than the 12 weeks in order to have 
sufficient test and learn cycles to meet the 
Exit objectives of the RS. 

Therefore, it is proposed that the period for 
testing may suitably be extended on a case 
by case basis to accommodate the effective 
evaluation of the Exit criteria be considered. 
Suitable incentives to exit the RS efficiently 
(such as limitations to the size of pilot etc.) 
should be set by the RBI to ensure efficient 
use of the RS. 

Thank you for your consideration of our comments. 
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Entity 12 welcomes the opportunity to comment on the Draft 
Enabling Framework for Regulatory Sandbox (the Framework). 

We completely support the governmental efforts in creating and 
enabling regulatory environment through updating obsolete 
regulations, streamlining existing regulations and creating flexible 
frameworks, such as regulatory sandboxes to drive innovation. I 


we are to 

enclose a few points for your consideration. 

The Reserve Bank of India’s proposed framework for a Regulatory 
Sandbox is an important and progressive step for fintech innovation 
in India, leading to greater financial inclusion and acceleration of 
digital payments. We deeply appreciate the consultative approach, 
allowing industry and other stakeholders to share feedback. 

We hope that the sandbox will be opened up for wider participation, 
and some of the terms, such as the 26-week end to end period 
specified (which may be difficult to adhere to for complex products 
launched for different markets and languages within India) may be 
relaxed. We would also suggest that the Regulatory Sandbox be 
opened to other areas, especially those supporting financial inclusion 
(e.g. credit information/analytics) and not be restricted to a set 
mandate. Given the need for reaching the last mile, balancing safety 
and security and at the same time driving inclusive growth, it would 
be pertinent to welcome all types of innovation. Once innovations 
have been tried and tested, the country would then actually have a 
bouquet of solutions which could be chosen to further its ambitions to 
move towards a less cash society. 

May we submit the following three specific suggestions for the RBI’s 
kind consideration. 

□ In its present form, only start-ups are proposed to be allowed to 
participate in the Regulatory Sandbox. This excludes collaborative 
innovations from startups working along with incumbents with global 
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/ local expertise and platforms, some of them already with 

investments in innovative Indian fintech start-ups. Some startups 
leverage current, mature technology and expertise of incumbents and 
build solutions around that. Other startups may wish to aim for global 
market access via such partnerships. Regulatory sandboxes in the 
EU, Canada and other nations allow incumbents. Hong Kong allows 
only established companies to participate in its regulatory sandbox. 
Our recommendation is to focus on innovation being developed and 
created for India, without filtering it based on the nature of the firm 
innovating. By limiting the Sandbox to only specific start-ups, may 
result in forcing these startups to perforce build solutions from the 
grounds up rather than building on top of solutions already available 
- which may be a futile exercise. Thus, the focus needs to be on the 
solution and innovation. 

□ We do not have clarity on the legal relaxation that would be 
provided to fintech companies during the sandbox period. The 
framework refers to the inability of RBI to offer any legal waivers. 
Since regulatory relaxation is a necessary condition for sandbox 
experiments and it is a form of limited waiver, we are unclear as to 
what form of “legal waivers” are excluded. Typically, fintech 
regulations would be relaxed in a regulatory sandbox, while other 
laws of the land would still apply, and this should be clarified. 

Confidentiality and Privacy: Given the applicant may be asked to 
share PoC results, and the RBI would monitor the empirical results 
during the testing through the Fintech Technology Unit, we suggest 
an assurance of data confidentiality and privacy, especially in light of 
the upcoming Personal Data Protection Bill. In regards to the 
statement RBI reserves the right to publish any relevant information 
for the purposes of knowledge transfer”, we request a clarification that 
such publication will be of aggregated data only, with specific product 
data and customer data redacted. 
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Restrictions end requirements: The framework mandates declaring 
“an acceptable exit and transition strategy" (6.5.6) in case the pilot 

service has to be discontinued. This could be a problematic clause 
as 

- Restrictions and requirements: The framework mandates declaring 
“an acceptable exit and transition strategy" (6.5.6) in case the pilot 
service has to be discontinued. This could be a problematic clause 
as 

□ companies usually try sandboxes for business ideas that don’t 
really have a conclusive exit plan. To force an exit plan for a startup, 
say, a product that is at beta stage, seems to be an overkill. 

The framework also makes it mandatory for companies to share the 
results of proof of concept (PoC) testing of use cases" before 
entering the fintech sandbox. By virtue of its nature, a regulatory 
sandbox is supposed to provide a test bed for ideas that make take 
a lot of time to mature; and those final ideas may actually get tweaked 
from what the original idea was. Thus requiring all of them to have a 
tested POCs first, apart from a clear exit strategy, is presumptive and 
restrictive of innovation. 

Thank you again for the opportunity to share our suggestions, and we 
look forward to the RBI’s Regulatory Sandbox being notified as soon 
as possible, after factoring in stakeholder feedback. 

13 

Thank you for initiating a process to set up a framework for regulatory 
sandboxes to spur FinTech innovations in India, and for considering 
suggestions on this framework from various stakeholders. 

Please see attached Entity 13 suggestions in respect of the Draft 
Enabling Framework for Regulatory Sandbox, as issued by the RBI 
on April 18, 2019 (“RS Framework”). We hope that you find our 
suggestions helpful. 

Please do reach out to us if would like to discuss our suggestions or 
need any assistance in relation to the matters set out in the RS 
Framework or our suggestions. 
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KEY OBSERVATIONS AND SUGGESTIONS 

1. The RS Framework as an umbrella regulation 

We understand that the RS Framework is proposed to be a regulation 

for setting up of regulatory sandboxes for market participants to test 

innovative FinTech products in a controlled environment to reduce 

the lag between innovation in financial services and regulation of 
such financial services. To fully access the innovative potential of 
such ‘safe spaces’ for offerings which could further financial inclusion, 
we believe that additional detailing on certain aspects of the RS 
Framework would be useful. Further, sandbox specific norms should 

also be formulated the outline of which may be laid out in the RS 
Framework. With this background, please see below a few 
suggestions for your consideration. 

1.1 RS Framework and Sandbox Norms 

While we recognise the need for the RS Framework to be broad in 
scope and vest the RBI with discretion in regulating each sandbox, 
we believe a few aspects within the RS Framework may be captured 
in greater detail. To this extent, the RBI may consider adopting an 

umbrella legislation approach to the RS Framework where the RS 
Framework provides broad contours of set up, operationalisation, 
functions, supervision and winding-up of sandboxes. Specific rules 
and norms for each sandbox ("Sandbox Norms”), within the broad 
contours mentioned above, can be stipulated separately. 

(a) Some key aspects that may be addressed in greater detail in the 

RS Framework include: 

(i) the legal provisions vesting the RBI with the mandate to put in 
place the RS Framework (RBI may consider referring to specific 
statutory provisions empowering RBI to put in place the RS 
Framework and the Sandbox Norms, to avoid challenges to the 
legality of such regulations); and 

(ii) the various modes for issuance of Sandbox Norms, which could 

include: 
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A. open bids or a tender process being conducted setting out the 
rules applicable to the cohort under such tender; or 
| B. inviting expressions of interest for participation in the sandbox on 
I an invite -° n| y basis with specific Sandbox Norms laid down in the 
I request for such expression of interest; and 

| (b) The contents of the Sandbox Norms themselves would vary for 
I each sandbox while operating within the RS Framework. 

1.2 Fintech Unit (FTU) 

I The RS Framework makes a reference to the constitution of an FTU, 
j which will oversee the sandbox process. However, the RS 
| Framework does not set out the manner of constitution, or the 
powers, functions and responsibilities of the FTU. In this regard, we 
| suggest that the FTU be constituted as a two-layered structure, with 
a governing council and a sandbox-specific sub-committee (The HFC 
had also recommended a similar layered-structure for the regulatory 
body in-charge of regulatory sandboxes. See Appendix G, ‘Blueprint 
for a Regulatory Sandbox’, Report of the HFC). The RS Framework 
may therefore specify: 

(a) The constitution of, and the powers and functions of the governing 
council in relative detail, which may include: 

(i) criteria to determine membership to the governing council, along 
with restrictions, if any, on the tenure of each member (Suggestions 
of the HFC on the constitution of a sub-committee having 
representation from multiple financial regulators and technical 
experts may also be considered. See Appendix G, ‘Blueprint for a 
Regulatory Sandbox’, Report of the HFC); and 

(ii) key functions and powers of the governing council which may 


include: 


A. drafting and issuing the Sandbox Norms, 

B. finalisation of participants in a sandbox based on 
recommendations of or a preliminary assessment undertaken by a 
sub-committee, 
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C. research, development and market study for identifying new areas 

for sandboxes, 

D. collaboration with facilitation service providers such as technical 
consultants, lawyers, accountants, etc., and 

E. determining applicability of existing regulations or relaxation 
thereof to a cohort. 

(b) The constitution of, and powers and functions of each sub¬ 
committee in broad strokes, which may include: 

(i) the manner of constitution and criteria for membership to the sub¬ 
committee. While, actual members of each sub-committee may be 
notified in the Sandbox Norms, the RS Framework may state that 
each sub-committee may comprise of: 

A. one or more member of the governing council, 

B. members of industry, academia, think tanks, and other 
stakeholders, and 

C. representatives of other financial regulators, in case of cross- 
sectoral sandboxes. Since the RS Framework makes references to 
FinTech offerings that cut across different regulatory regimes that 
may be tested in a sandbox, we recommend that the sub-committee 
be constituted to enable interaction of different regulators. [Note: 
Please refer to our suggestions in paragraph 3 below, in respect of 
holistic functioning of the sub-committee.]; and 

(ii) key functions of the sub-committee which may include: 

A. assessment of applications for participation in the sandbox, 

B. consultation and interaction with applicants, 

C. finalisation of recommendations to the governing council on 
potential participants in the sandbox, 

D. supervision, monitoring and testing during the sandbox, 

E. monitoring adherence to the Sandbox Norms by each participant, 

F. winding up of the sandbox, 

G. grievance redressal, and 
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H. collaboration with facilitation service providers such as technical 

consultants, lawyers, accountants etc. at a cohort level. 

(iii) Further detailing of the powers, functions and responsibilities of 
each sub-committee could be addressed in the relevant Sandbox 
Norms. 

(c) Additional responsibilities of the governing council 

To enable creation of sandboxes that respond to the pace of FinTech 
innovations in the market, the governing council of the FTU may be 
endowed with the authority to gather information regarding such 
innovations. To this extent, the governing council could be provided 
access to data from other departments within the RBI. Further, the 
governing council could also spearhead a consultative law-making 
process by seeking public comments on white papers or draft 
regulations prepared using evidence gathered from a successful 
sandbox. 

(d) Additional responsibilities of the sub-committee 

Since the sub-committee will be involved in assessment of applicants, 
it is well placed to recommend relaxations, if any are required for the 
cohort, during the sandbox period. Further, since the sub-committee 
would have observed the impact of the existing regulations on 
offerings tested in a sandbox in real time, the sub-committee may be 
made responsible to draft or amend regulations for the post-sandbox 
period, which may then be considered by the governing council and 
other departments of the RBI. 

2. RS Framework as delegated legislation 

2.1 RBI may consider referring to specific statutory provisions 
empowering RBI to put in place the RS Framework and the Sandbox 
Norms. This may aid in avoiding challenges to the jurisdiction of RBI 
to create and effect such regulations. 

3. Cross-sectoral sandboxes 

3.1 The RS Framework seeks to cover a wide range of services and 
products within its ambit, some of which may be regulated by multiple 
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| inclusion can be one of the objectives of regulatory sandboxes, with 
I micro-insurance being a potential area that can be explored. Further, 

I paragraph 6.1.1 of the RS Framework lists down financial advisory 
| services and wealth management services as indicative financial 
| services to be considered for testing under a regulatory sandbox. 

I lnsurance and investment advisory services usually come under the 
ambit of IRDA and SEBI, respectively). We note a great deal of 
convergence in several services and offerings presently in the 
■ market, which in turn may require convergence of regulatory 
oversight as well. In this regard, we would welcome the RBI adopting 

a cross-regulatory approach in the RS Framework and the relevant 
I Sandbox Norms. 

4. Parameters for selection of applicants 

4.1 The eligibility criteria for applicants, in respect of each cohort, may 
be made broader. We believe that eligibility to a sandbox should not 
be contingent on the type of entity (The HFC in its report notes that 
regulations pertaining to sandboxes should be entity-agnostic. The 
Watal Committee, constituted by the Ministry of Finance to study the 
digital payments ecosystem in India, too recommended creation of 
regulatory sandboxes to foster innovation, and was silent on entity- 
specifications for participants in such sandboxes). Restricting 
participation in regulatory sandboxes only to start-ups excludes 
ventures that have a significant presence or net worth seeking to roll 
out FinTech innovations. As a result, we believe that sandboxes could 
be a great opportunity for financial landscaping in India and attracting 
investments (domestic and foreign) in financial services. 

4.2 Further, paragraph 2.2 of the RS Framework presumes that 
products and services sought to be tested in a sandbox have not yet 
been launched in the market. Such a requirement, in our opinion, 
takes away from the RBI's ability to regulate products and services 
that have a lready been launched in the market. The RS Framework 
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could look to enable the RBI to mandatorily move an offering already 
launched in the market into a sandbox, especially where the offering 
is unregulated or entails perceptible risk to consumers. 

5. Timelines for stages of sandbox process 

5.1 The identification of different stages within the sandbox process 
in the RS Framework is welcome. However, we recommend that the 
RS Framework not stipulate exact timelines required for each stage. 
Timelines specific to each stage may instead be mentioned in the 
Sandbox Norms. This would also give the RBI flexibility to suggest 
different timelines for the same stage in respect of different 
sandboxes. 

6. Regulations applicable during and post sandbox 

6.1 Applicability of extant regulations during sandbox 

(a) As mentioned in paragraph 1.2(d) above, the sub-committee may 
make recommendations on applicability or relaxations of existing 
regulations to the governing council. 

(b) Further, we believe that the sub-committee should keep track of 
all applicable regulations to a cohort. While a list of such regulations 
may be sourced from applicants, reliance should not be placed 
exclusively on such crowd-sourced information. Alternatively, the 
FTU may consider empanelling advisors (such as technical 
consultants, accountants and lawyers) and offering their services to 
applicants. 

(c) In case of cross-sectoral sandboxes, the RS Framework may 
include provisions whereby the RBI may consider liaising with other 
regulators, to enable relaxations from regulations made by such 
regulators. The extent, manner of and the process for this may be 
covered in the Sandbox Norms. 

6.2 New regulations post sandbox 

(a) The RS Framework should enable the governing council to 
propose regulations on offerings tested within a sandbox. 
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regulations may be implemented could be specified in the Sandbox 
j Norms, as these timelines would need to be sandbox specific, 

7. Liability of applicants in respect of consumer risks 
7.1 Each sandbox launched by the FTU should have a corresponding 
| liability model for mitigating business and consumer risks. The 
I followin 9 models, in our view, may be considered: 

I (a) no-waiver model, where the customers are entitled to all 
J protection available under law, and all customer losses are made 

good by the applicant. This is the only model proposed in the RS 
I Framework; 

(b) consent-based model, where customers specifically consent to 

waiving all rights and remedies available to them in respect of losses 
suffered by them; or 

(c) trust-fund or cohort insurance model, where a fund is created with 
| contributions from each member of a cohort. The FTU may determine 
| (or cap) the liability of each participant in a sandbox or may, in specific 

| situations, mandate payment of insurance proceeds from out of the 
fund. 

7.2 For each sandbox, the sub-committee may recommend adoption 
| of a specific liability-model to the governing council. The final decision 
| of the governing council, could be based on, among other factors, the 
I P robable systemic risks inherent to the offering being tested. 
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14 


We appreciate the RBI for taking the initiative of setting up a 
framework for Regulatory Sandbox which enables significant 
opportunity to ecosystem participants to ’test' their offerings and 
solutions. This also allows for regulatory oversight in a controlled 
manner for an initiative which depends on an innovation. This is an 
approach akin to similar such initiatives across the world. 

While this step is certain to give a fillip to the Fintech industry in India, 
we feel that there are certain areas where the scope of Regulatory 
Sandbox can be modified. 

Clause 6.5.1: Eligibility Criteria: 

The Draft Framework limits participation in the RS to 'startups’ as 
defined in DIPP Notification No. G.S.R. 364(E) dated April 11, 2018. 
By definition this excludes any company that has revenues of over 
Rs. 25 crore or is more than 7 years old. 

Suggestion: 

Our suggestion is that companies with any vintage or revenue should 
be allowed to participate in the Regulatory Sandbox: 

1. Regulator should provide equal opportunity to all players in the 

ecosystem to participate. The best possible propositions should be 
chosen. 

2. Innovation can come from larger companies as well and is not 
limited only to startups (as defined in DIPP). 

3. Larger companies will have a larger canvas and coverage of the 
segment which is being targeted for the solution along with possibly 
greater experience and knowledge of the segment. Larger 
companies will also have wider customer base with larger geographic 
spread across heterogeneous demographics. Hence, the reach of the 
POC will be wider and could be tested across a larger cross section 
of users. 

4. Larger companies probably have greater risk management 
visibility and appetite. They would also have more willingness and 
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Ability to invest deeply in creating the infrastructure needed for (he 
POO. 

We would request the RBI to consider the above suggestion and 
allow wider participation from organisations. 

Also, we suggest that post completion of the POC, respective 
regulator(s) should facilitate smoother continuation/ exit of the 
incubation, minimizing any impact of the experiment on 
consumer/entity/regulatory systems and others as may have been 
exposed during the trial period. 


We refer to the recent draft for •Enabling l-ramework for Regulatory - 
Sandbox’ dated April 18, 2019. We appreciate the new initiative of 
Resenre Bank of India for taking initiative to regulate and promote 
Fintech business in India. We have reviewed the draft Sandbox 
regulatory framework and following are our comments. 

Entity 15 Comments: 

Background: 

Globally, international financial centres have Fintech Sandbox 
regulations such as DIFC in Dubai, Singapore. Abu Dhabi Global 
Markets, Astana International Financial Centre (AIFC) etc The 
Fintech policy for global financial centres have inherent advantage 
ease of regulations, tax incentives, access to global markets as well 
as domestic market. These advantages would help to attract global 
fintech companies to enter India and would also help domestic 
companies to promote the products globally. 

Proposal: 

The Fra mework for Regu latory Sandbox may also be extended to 

Entity 15 ^- 
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We would be happy to provide detailed document or present our 
proposal to committee if required. 


16 


We on behalf of Entity 16 commend the Reserve Bank of India (RBI) 

for issuing a draft framework that seeks to operationalize Regulatory 
Sandbox (RS) mechanism in India, which marks a shift to a more 
forward-oriented yet evidence-driven regulatory framework. 

We support the idea to allow experimentation and to facilitate FinTech 
innovation through RS, while limiting risks to consumers and financial 
ecosystem. We believe that the RS can be a powerful tool to enable 
India’s next-generation innovation in FinTech and financial inclusion 
imperatives. While the RBI’s efforts represent an important step in 
spurring the FinTech innovation in India, the scope of the RS seems 
a bit narrow, and there is an opportunity for further reform and 
simplification. 

Attached are the suggestions, recommendations and certain 
clarifications on the draft framework for your kind consideration. 



We would be happy to personally present our submission in detail, 
whenever required. 

Entit Y 16 ’ would like to thank RBI for this 

opportunity to put forth their thoughts and insights on Draft 
Framework for Regulatory Sandbox (draft) for the kind consideration 
of RBI. 
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Group on FinTech in July 2016, which published its report in February 
2018 recommending the RBI to launch a Regulatory Sandbox (RS) 
for FinTech entities. We further appreciate RBI for its positive 
response on that recommendation and release of the draft framework 
in April, 2019 that seeks to operationalize RS mechanism in India. 
We believe that this step may proceed to mark a shift to a more 
forward-oriented yet evidence-driven regulatory framework. 
Regulators across the globe have already adopted such a “test and 

learn approach to stay ahead of the curve and make rapid data- 
driven decisions. 

Moreover, we support the idea to allow experimentation and to 
facilitate FinTech innovation through RS, while limiting risks to 
consumers and financial ecosystem. We believe that the RS can be 
a powerful tool to enable India's next-generation innovation in 
FinTech and financial inclusion imperatives. While the RBI’s efforts 
represent an important step in spurring the FinTech innovation in 
India, the scope of the RS seems a bit narrow, and have opportunity 
for further reform and simplification. 

Also, it seems that there is a primary focus on regulatory v/s business 
innovation or co-creation and it somewhere lacks to address major 
design challenge of the other RS. Hence, long term vision of business 
led innovation must be explicitly included. Further, the product 
lifecycle governance needs to be established as the current lifecycle 
stages less correspond to the innovation and co-creation, instead 
they talk about standard waterfall steps. 

Thus we hereby place our suggestions and recommendations to RBI 
for its kind consideration. 


Entity 16 
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RS is a framework set up by a sectoral regulator to allow small scale, 
live testing of innovations by the firms in a controlled environment 
(operating under a special exemption, allowance or other limited, 
time-bound exception) under the regulator’s supervision. This 
concept was recently developed when there started a rapid 
technological innovation in financial markets as an attempt to address 
the frictions between regulators' desire to encourage and enable 
innovation and the emphasis on regulation. RS introduces the 
potential to change the nature of the relationship between regulators 
and financial services providers (regulated or aspiring) towards a 
more open and active dialogue. It may also enable the regulator to 
revise and shape the regulatory and supervisory framework with 
agility. In 2015, the U.K. Financial Conduct Authority (FCA) coined 
the term “Regulatory Sandbox” (FCA 2015). A sandbox-like 
framework was also set up by the U.S. Consumer Financial 
Protection Bureau (CFPB) in 2016 under the name Project Catalyst 
(CFPB 2016). Since then, the concept has spread across many 
countries like Abu Dhabi, Sierra Leone, Australia, Malaysia, 
Singapore etc. setting up more than 20 RS. 

Below mentioned is our seriatim submission containing suggestions, 

recommendations and clarifications on the draft for the consideration 
of the RBI. 

1. The Regulatory Sandbox i.e. clause 2.1 describing that “.The 

RS allows the regulator, the innovators, the financial service 
providers (as potential deployers of the technology) and the 
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"["customers (as final users) to conduct field tests to collect evidence 
I on the benefits and risks of new financial innovations, while carefully 

| monitoring and containing their risks.” read with Objectives i.e 

| clause 2.2 which reads that the “.The RS provides an 

J environment to innovative technology-led entities for limited-scale 
I testing of a new product or service that may or may not involve some 
| relaxation in a regulatory requirement before a wider-scale launch. 

.” further read with Regulatory Sandbox: Risks and Limitations 

i.e. clause 4.1 communicating that".Innovators may lose 

| some flexibility and time in going through the RS process (but running I 
I the sandbox program in a time-bound manner at each of its stages I 
| can mitigate this risk).” Here, financial service provider is being 
| defined as potential deployers of the technology and in some other 
clauses as innovators of the technology. The role of the financial 
j service provider in this mix is not properly defined. Clarification on I 
I who are these technology led entities may further be required. Word 
| innovators is also being used in the draft but the same has not been 
defined too. Are innovators the same as innovative technology led 
| entities or financial service providers? Looking at the industry as it is 
| today, innovators are very different from financial service providers. 

I lnnovat °rs give the financial service providers the technology-led 
I products and services to perform their financial services and carry out 
I business plans. Recommendations: 

| ■ It is very important to demarcate the entities who will be; and should 
I flowed to test new products and services in the RS. 

■ Hence may we request the RBI to provide the proper definitions to 
J the words used interchangeably at various places such as innovator, 

| technology led entities, potential deployers of technology and 
I financial service providers for the sake of bringing clarity that who 
I may or may not apply to the RS. 

2. The Regulatory Sandbox 
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the regulator to engage with the ecosystem and to develop 
innovation-enabling or innovation-responsive regulations that 

facilitate delivery of relevant, low-cost financial products.” We 

are hopeful that as mentioned in the draft, delivering low cost 
products may not be the only objective of the innovators. Some of the 
innovators may want to work on medium cost but high efficiency 
products to cater to a niche market segment. 

Recommendation: 

• Thus, it should not form the only and mandatory criteria for selection 
of the products/ services/ proposals. Bringing cost effectiveness to 
the existing procedures may be one of the norms for such selection 
The framework for the RS should be developed through a principle 
based approach. The RS should adopt: "promoting competition, 
efficiency and innovation in the FinTech industry while protecting 
consumer’s safety” as its core principle. 

3. Objectives 

Clause 2.2 reads that “. The RS provides an environment to 

innovative technology-led entities for limited-scale testing of a new 
product or service that may or may not involve some relaxation in a 

regulatory requirement before a wider-scale launch.• However, 

clause 8.2 reads as “.Upon successful experimentation and on 

exiting the RS, the sandbox entity must fully comply with the relevant 

regulatory requirements.- Both the clauses read together 

creates confusion in the mind of the reader as well as an applicant. 
The intent of this draft is to see whether a new product or service, if 
is serving the mass purpose of financial inclusion or requires any 
amendments or modifications in the current regulations. 

If a new product or service is being tested under the impression that, 
for a wide scale launch of this product, some regulations may require 
changes, and after a successful testing, the applicant has to again 
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fall back on the existing regulations, the objective of the both the 

applicant and the RS will not be served 

Recommendations: 

■ Hence we request the RBI to modify the language to best 
accommodate the desired intentions of RS. 

■ Also, the steps to be taken after a successful testing of a product or 
service for a wide-scale launch and RBI's role in the same may be 
included in the draft. 

4. Regulatory Sandbox: Benefits 

Clause 3.4 reads “. Fourth, by providing a structured and 

institutionalized environment for evidence-based regulatory decision¬ 
making, the dependence of the regulator on industry/stakeholder 
consultations only is correspondingly reduced 

In order to ensure greater transparency in regulatory development 
process through RS, RBI should not de-prioritize public consultation. 
For example, in Australia, the PSR Act requires the PSB to conduct 
public consultations in matters where it proposes the imposition or 
variation of an access regime or standard. In particular, the PSB is 
required to publish a notice summarizing the purpose and possible 
effects of its actions, invite people to make submissions within a 
specified time and consider any submissions that are received. 
Moreover, the PSB is also bound by general notification obligations, 
which require it to publish notice, and ensure that participants in the 
payment system are informed of actions involving the imposition or 
variation of an access regime or standard. 

Recommendation: 

■ Based on the global practices, RBI must adopt the policy of public 
consultation while changing/ amending the extant regulations which 
may serve as an important component in terms of regulatory 
development process adopted by the RS. 

5. Regulatory Sandbox: Risks and Limitations 
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Clause 43 reads -.The RBi or Us RS cannot provide any legal 

WalVers . As Rs allows th e FinTech entities to operate in a 

controlled environment, it is crucial that they are granted relaxations, 
dispensations and waivers from certain legal regulations. RS 
throughout the world are premised on such relaxations and waivers. 
While some regulators grant blanket waivers, others permit specific 
relaxations with regard to identified legal regulations or through 
waiver or no-action letters (NALs) on a case-to-case basis. 

The Consumer Finance Protection Bureau in the United States issues 
NALs to the entities in a sandbox that offers the latter, a protection 
against any adverse regulatory action during the period of the 
sandbox. Similar certainty of the ring-fence would be of critical 
importance if the RS framework is to facilitate innovation. This will 
enable them to test their products and services without fear of legal 
sanctions. No FinTech entity will be willing to enter the sandbox 
without regulatory assurance that safeguards it from adverse legal 
actions while in the controlled environment 
Recommendations: 

■ It is thus recommended that RBI offers legal protection to 
participants in a sandbox through formal No Action Letters (NALs) 
valid for the duration for which the participants are in the sandbox 
testing in the controlled environment, at least for the laws under the 
1 jurisdiction of RBI/ regulations issued by RBI 

• This would also help in ensuring that RBI's intent of allowing certain 
relaxations (as contemplated under clause 4.2) are uniformly 
communicated in the draft. 

6. Sandbox Cohorts and Product/ Services/ Technology 
Clause 6.1 reads “.An indicative list of innovative products/ 

services/ technology which could be considered for testing under RS 
are as follows. 

Innovative Products/ Services 
Retail payments 
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• Money transfer services 

• Marketplace lending 

• Digital KYC 

• Financial advisory services 

• Wealth management services 

• Digital identification services 

• Smart contracts 

• Financial inclusion products 

• Cyber security products 

Innovative Technology 

• Mobile technology applications (payments, digital identity, etc.) 

• Data Analytics 

• Application Program Interface (APIs) services 

• Applications under block chain technologies 

• Artificial Intelligence and Machine Learning applications 

We acknowledge the fact that RBI is being liberal and open to 
technological enhancements and advancements and in the light of 
same has declared all the above mentioned items in the list as only 
indicative. To add, there are various other fields and technology 
oriented areas where the innovators may be willing to participate and 
contribute. We are positive that the aforementioned list is not 
exhaustive in nature and the applications shall be given approval to 
participate on the basis their credentials and ability to bring 
transformation in existing mechanisms. We are also hopeful for the 
kind cooperation from RBI in considering the applications containing 
items/ proposals over and above this indicative list. 

7. Regulatory Requirements/ Relaxations for Sandbox Applicant 

Clause 6.2 reads .The RBI may consider relaxing, if 

warranted, some of the regulatory requirements for sandbox 
applicants for the duration of the RS on a case-to-case basis. 
However, regulatory requirements that shall mandatorily have to be 
maintained by the applicants are as follows: 
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"• Customer privacy and data protection 

‘ Secure storage of and access to payment data of stakeholders 
1 Security of transactions 

KYC/ AML/ CFT requirements 
Statutory restrictions.” 

Among others, the draft includes statutory restrictions as one of the 
mandatory limitations which brings it parallel to the existing entities 
outside RS which are still supposed to follow all the regulations. 
Further, the list provided in clause 6.1 includes many areas where 
tests may be carried out in RS but the same regulatory requirements 
are asked here in clause 6.2 to be fulfilled and followed. For Instance, 
clause 6.1.1, has included Digital KYC as well as Digital Identification 
Sendees under innovative products I services to be introduced. 
However, under clause 6.2, there is a clear mention that mandatory 
requirement would regulatory requirements of KYC, That is somehow 

contradictory in nature and would destroy the utility and innovation 
around digital KYC. 

Recommendations: 

Hence we request RBI to only restrict the entities registered in RS 
to the most important regulations and relax the other statutory 
conditions for greater participation, innovation & solutions. 

■ RBI may also provide waiver/ relaxation in certain conditions to 
those who are testing the same regulatory products such as Digital 
KYC under the controlled and supervisory requirements. 

■ RBI may also provide an indicative list of areas where regulatory 
relaxations could be provided under the RS. 

8. Exclusion from Sandbox Testing 

Clause 6.3 reads “.An indicative negative list of products/ 

services/ technology which may not be accepted for testing is as 
follows. 

• Credit registry 

• Credit information 
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Crypto currency/ Crypto assets services 
Trading/investing/settling in crypto assets 
Initial Coin Offerings, etc. 

Chain marketing services 

• Any product/ services which have been banned by the 
regulators/Government of India...” 

RS should ideally adopt a blue sky approach that helps to generate 
ideas for products and services in the FinTech space without any 
limitations. 

Moreover, one of the restricted items contain credit information. 
Given that credit remains under-penetrated in our economy, (a recent 
study released by Omidyar- BCG estimates that 40% of the MSME 
lending is through informal money markets), this exclusion will 
foreclose innovation for companies planning to offer credit- 
decisioning basis an alternative data points. In addition, the current 
structure of getting a credit from lending institutions itself is a catch- 
22 situation for customers and this credit information framework 
needs to be disrupted so that pure financial inclusion can be pursued 
in totality. Excluding credit information will remove the possibility of 
making digital lending more digital and sophisticated. 

It is pertinent to note that the UK’s Financial Conduct Authority (FCA) 
also does not provide any such negative list of products/ services/ 
technology for sandbox participation. 

Recommendation: 

To create more innovative and cost-effective solutions which may 
fill the existing gaps, it is requested to the RBI that any restriction 
should not be put on the participation of any product/ service/ 
technology in the RS, as long as it has not been prohibited under any 
law. 

9. Number of FinTech Entities to Be Part of a Cohort 

Clause 6.4 reads as “.The RS shall begin the testing process 

with 10-12 selected entities through a comprehensive selection 
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process as detairetTiyTtheyraTneworirundeT ‘FiFand Proper criteria foF 

selection of participants in RS.■ The approach of RBI for 

selection of 10-12 entities in a cohort to initially start with is 
praiseworthy but in some of the cases more entities may like to 
participate. Recommendation: • Thus, we request RBI to keep the 
approach flexible on case to case basis. 

10. Fit and Proper Criteria for Selection of Participants in RS 

Clause 6.5.1 (a) reads that ■.The entity should be a company 

incorporated and registered in India and shall meet the criteria of a 
start-up as per Govt, of India, DIPP Notification No G S R 364(E) 

dated April 11, 2018.■ It has been restricted to start-ups as 

defined by the Department of Industrial Policy and Promotion (DIPP) 
Thus, large and well-established entities in the financial sector that 
do not qualify as start-ups cannot utilize the sandbox mechanism, 
even though they are actively engaged in technological and financial 
innovations. It is important to recognize that it is not necessary to be 
a start-up company to innovate in the financial services industry. 
Restrictions of this nature takes away the opportunity of collaborative 
innovation between the incumbents and start-ups. Countries like 
Hong Kong, Canada, EU, Malaysia, Abu Dhabi, Singapore, Australia. 
Thailand and Bahrain have allowed participation of traditional players 
m their respective RS, along with the FinTechs. A huge swathe of 
work today is through strategic partnerships between mature and 
young FinTech entities on the one hand and incumbents such as 
Banks on the other, both locally and globally. 

Recommendation: 

■ To foster innovation and promote strategic relationships, it is 
requested to the RBI that the ambit of the RS should be widened to 
allow participation of start-ups and incumbents or early stage 
innovation applications. 

Clause 6.5.1 (e) reads that *. a satisfactory CIBIL or equivalent 

credit score of the promoter(s)/director(s)/ entity is required.■ 
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Seeking a “satisfactory” CIBIL or equivalent score of the applicant's 
promoters/ directors, is unduly restrictive. There are other ways in 
which an entity's (applicant's) risk towards its counterparties and 
consumers can be secured. One is already hard-wired through net- 
worth Rs 50 lakh requirement. Recommendation: 

■ This should be reconsidered as the net-worth Rs 50 lakh 
requirement is already hard wired. 

Clause 6.5.1 (f) reads that the “.Applicants should demonstrate 

that their product is technologically ready for deployment in the 
broader market.”. 

The clause above is open to several interpretations. We are hopeful 
that the intention of the regulator with the above clause is that the 
applicant’s technology is sound and scalable, whenever required to 
be deployed in the broader market and the applicant can demonstrate 
the same. 

Recommendation: 

■ We request RBI to explain this clause in detail/ issue clarification as 
this condition can impose a significant burden on start-ups, if the 
technology has to be deployable with an inhibiting regulation before 
entering the RS 

11. Fit and Proper Criteria for Selection of Participants in RS i.e 

clause 6.5.7 which proposes “.The applicants shall be required 

to share the results of Proof of Concept (PoC)/ testing of use cases 
including any relevant prior experiences before getting admission into 

RS for testing, wherever applicable.” read with End-to-End 

Sandbox Process i.e. clause 7.1 which reads “.A detailed end- 

to-end sandbox process, including the testing of the products/ 
innovations by FinTech entities, shall be overseen by the FinTech 

Unit (FTU) at the RBI.” further read with Disclosure i.e. clause 9 

which proposes that “.The RBI shall reserve the right to publish 

any relevant information about the RS applicants on its website, 
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part of thedocument. Data partners |s key 

to success of such sandbox that is not explicitly covered. Hence, we 

further request the RBI that operational guidelines, in this scenario, 
may be released. 

15. Important Role of Industry Bodies 

FinTech and financial services innovation is a very important and very 
attractive segment and RS by RBI is likely to get hundreds of requests 
if not thousands. This may put immense pressure on system to 
process such requests and also being able to get these players live 


for testing. 


can play a 


very critical role in identifying critical subjects, groups and with RBI’s 
guidance may help in prioritising the overall requests and also may 
try and group them to best possible way to speed up such processes. 
In past such bodies have worked very closely with RBI for such 
innovative pilots like Person to Person remittance with Aadhaar using 
PPIs etc. Where such bodies brought certain key players together, 
briefed them on the test and pilot objectives and also acted as single 
window communication channel between industry players and RBI to 
help in integrated communication and supporting both industry 


players as well as regulators. 


| also worked closely with 


stakeholders to collate the data and provide regular feedback on 
possible corrections etc. required during pilot period. Such additional 
supporting role and utilizing industry bodies could also help 
regulators achieve full potential of the RS with faster speed. 

16. Collaboration Framework with FinTech Ecosystem 
The current draft mentions about the FinTech Unit inside RBI, 
whereas it's not very clear how the collaboration with broader 
, FinTech ecosystem will take place There is a need to identify a 
committee from FinTech/ digital ecosystem to collaborate with 
FinTech Unit (this could include existing industry/ FinTech 


representative entities 


I)- 
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There should be publicly shareable updates as everyone in the 

industry would be looking for guidance/ update. 

17. City as a Sandbox 

The draft has broadly defined the construct of the batches and how 

the program will be executed. However, it lacked information on how 
the test environment will be created and how would any relaxed 

regulations be tested against any hypothesis. It will be apt to define a 
geographical boundary in a city and allow selected start-ups to 

showcase results for the presented use case by testing the product 
within a real homogenous user group living in that defined zone. E.g. 

Mumbai can be considered and prepared for the theme. That should 

include set of FIs, merchants, consumers, NGOs etc. who will help in 

defining sample set and driving experimentation. 

18. Reference Application/ Evaluation Checklist 

The draft doesn’t include any sample application form/ evaluation 

checklist. A reference as annexure to a filled application form and 

indicative checklist for evaluation will help better understanding for 

applicants. 

19. Monitoring/ Process after Exit 

At the end of a cohort, when an entity of Regulatory Sandbox exits, 

what would be monitored or conditions post exit should be mentioned 

clearly. E.g. the go ahead, change in regulation, product roadmap 

etc. 

Conclusion 

RBI’s proposal for setting up RS is a welcome approach and would 

catapult India among the leading jurisdictions that train their focus in 

harnessing innovation in the FinTech space. We are fully committed 

to ensure the success of RS in India, and would be happy to engage 
with the RBI to promote innovation in the FinTech Industry. 
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17 

We refer to the Draft Enabling Framework for Regulatory Sandbox 
(“Proposed Framework”) released by the Reserve Bank of India 

(“RBI”) on April 18, 2019 for seeking stakeholder 

comments/suggestions. At the outset, we would like to congratulate 
RBI on recognizing the state and potential of the Fintech market in 
India today and accordingly taking a welcoming step towards creating 
a dynamic, evidence-based regulatory environment which learns 

from, and evolves with, emerging technologies. 

We, at Entity 17, in keeping with our commitment to help in the 
development a forward looking Regulatory Sandbox regime in India, 
have analysed the Proposed Framework and provided our 

comments, feedback and suggestions in the attached document. We 

shall also be delivering the physical copy of our comments and 
recommendations to you shortly. 

We sincerely hope that our views will help RBI in formulating further 

reforms to the Fintech regulatory framework in India. We shall be 

happy to continue to work closely with RBI and conduct further in- 

depth research and analysis, if required. 
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At the outset, we believe that the Draft Enabling Framework for 

Regulatory Sandbox (“Proposed Framework”) is a welcome step 
towards creating a dynamic, evidence-based regulatory environment 
which learns from, and evolves with, emerging technologies. We 
concur with the overall objective of the Proposed framework of 
improving the pace of innovation and technology absorption along 
with financial inclusion. It has the potential to give significant boost to 
entrepreneurship, competition and building infrastructure capabilities 
for the Indian financial services sector. 

Pursuant to this, we would like to take this opportunity to contribute 
our suggestions, comments and feedback on the Proposed 
Framework that the Reserve Bank of India (“RBI”) has so kindly put 
up for public consultation. 


s 

Pag 

e 

No. 

Reg 

ulati 

on 

No. 

Comments/ 

Change 

Suggested 

Rationale/Reasons for 

Comments/Suggestion 

1. 

4,5 

4.3, 

Approach on 

Clause 4.3 provides that the 



6.2, 

‘legal 

RBI or the RS cannot 



6.6 

waivers’ to 

provide any legal waivers. 



and 

be 

This sub-clause may create 



relat 

reconsidere 

some divergent 



ed 

d or clarified. 

interpretations because one 



provi 

To be 

of the underlying purposes 



sion 

confirmed 

of an RS is to provide 



s 

whether 

regulatory relaxations in fit 




Clause 4.3 

cases. Clauses 6.2, 6.6 and 




refers to only 

other related clauses in fact 




legal waivers 

recognize the power of the 




outside the 

RBI to provide regulatory 

. ^_I .*. 
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2 . 


jurisdiction 

or 

competence 
of the RBI. 


It should be 

clarified that 
the rs 
applicant 
need not be 
registered as 
a ‘start-up’ 
with the 
Government 
of India. 

Criterion no. 

1 (a) (III) of 
the said 
Government 
of India 
notification 
should be 


relaxations under the RS, 

which, in other words, 
would amount to ‘legal 
waivers’. 

The drafting of these 
clauses should hence be 
suitably clarified according 
to the intent. If the intent is 
that Clause 4.3 refers only 
to matters outside the RBI’s 
jurisdiction, that should be 
suitably clarified. 


The words “meet the 

criteria” may be interpreted 
by some to mean that the 
RS applicant should obtain 
registration under the 
Government of India 
notification. This does not 
appear to be the intent of 
the Proposed Framework, 
and in our view, would not 
be a necessity for an RS 
applicant. 

The said criterion (iii) (see 
footnote produced 

adjacently) is subjective 
and is similar to criteria 
already required by the 
Proposed Framework itself. 
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3. 


6.5.1 

(b) 


made 

optional. 


RBI should 
consider 
reducing the 
net worth 
requirement 
s applicable 
to start-up 
applicants. 

RBI may 

consider 

introducing a 

requirement 

for RS 

applicants to 

obtain 

adequate 

professional 

indemnity 

insurance 

cover and 

maintain it 

throughout 


Hence, the requirement of 
innovation and public 
interest is already ensured 
by the Proposed 


Framework. To avoid 
conflicting interpretations, 
this criterion (iii) can be 
dispensed with. 


I 


As per the Proposed 
Framework a RS applicant 
is required to have a 
minimum net worth of Rs.50 
lakh as per its latest audited 
balance sheet. 

We note that this may 
create significant barriers to 
the entry of various fintech 
innovators in the RS. It will 
be a challenge for many 
fintech startups to be able to 
reach this minimum net 
worth requirement in the 
initial years of their 
operations, which is also 
the most critical time period 
for fintech innovators. As a 
result, many promising 
fintech startups may not be 
able to avail of the benefits 
of the sandbox. Startups 


— 
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lifecycle of 

which are above the 

the RS 

prescribed net worth 

process. 

requirement are in any case 


often able to marshal 


resources to comply with 


ordinarily applicable laws. It 
is those startups which are 
below this threshold that 
may most benefit from the 
Proposed Sandbox. 

It is also pertinent to note, 
that if the capital is tied up 
for the purpose of fulfilling 
the minimum net worth 
requirement, it may impose 
financial constraints on RS 
applicants to utilize these 
funds for other vital 
activates such as hiring 
talent, purchasing technical 
infrastructure or developing 
new services. This may 
result in putting RS 

applicants with lesser 
financial capacity at a 
disadvantage, in terms of 
their capacity to innovate. 

Further, Clause 8.1 of the 
Proposed Framework, 
states that the RBI shall 
bear no liability arising from 
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RS process and any liability 
arising from the experiment 
will be borne by the RS 
applicant. 

We observe that the 
minimum capital 

requirement may have been 
introduced to ensure 
protection of consumers, 
nurture confidence in 
financial markets and cover 
liability arising from the RS 
process. In light of the 
above, we recommend that 
instead of a minimum 
capitalization requirement 
for the RS applicants, 
potentially new insurance 
products may be explored 
or be created by Indian 
insurance companies for 
RS applicants to obtain 
adequate professional 
indemnity insurance cover 
and maintain it throughout 
the period of the RS 
process. 

The above comments are in 
order to ensure that the net 
worth requirement does not 
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7, 


impair the success of the 
Proposed Framework. 


6.5.1 

Clause 


(0, 

6.5.1(f) 


6.5.2 

should 

be 

) 

amended 

to 

6.5.8 

provide for a 


5. 


7 

6.5.7 

RBI should 



consider 



removing the 

- - 


requirement 


The phrases and criteria in 

these clauses are 
subjective and can lead to a 
wide variety of 
interpretations, making it 
difficult to provide intelligible 
differentia between RS 
applicants whose 

applications have 

succeeded and failed. This 
may lead to disgruntlement 
and potential grievances of 
the latter. Rather, these 
criteria should be replaced 
by objective standards, 
including from international 
frameworks, to the extent 
possible. 

Further, it should be 
clarified that the use of the 
words "or” in Clause 6.5.2 is 
intentional and only any one 
of the three criteria are 
required to be met. 

As per the Proposed 

Framework, RS applicants 
will be required to share the 
results of proof of concept / 

_ 
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for RS 
applicants to 
share their 
relevant 
prior 

experiences 
relating to 
the results of 
proof of 
concept / 
testing of 
use cases. 

RBI should 
adopt good 
information 
governance 
practices 
throughout 
the lifecycle 
of the RS 
process, 
including the 
use of 
confidentialit 

y 

agreements 
from the 
earliest 
stage. 


testing of use cases 
including any relevant prior 
experiences before getting 
admission into RS for 
testing. Further, powers will 
be granted to RBI to check 
the IT systems used for 
end-to-end sandbox 

processing. 

We note that this may be a 
cause of concern amongst 
fintech innovators, with 
respect to the risk of 
information leaks and the 
resulting 

disputes pertaining to their 
proprietary information and 
trade secrets developed by 
fintech innovators. It 
covers know how, business 
information and 

technological information. 
Disclosure of this 
information would 

undermine a fintech’s vital 
interest or a unique selling 
point. 
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on 


7. 


7.1 


The time 

period for a 
cohort for 
testing an 
innovation in 
the sandbox 


The Proposed Framework 
under clause 7.2, stipulates 
the various stages and 
timelines for the RS 
Process, the complete 
duration of which has been 
should not indicatively mentioned to be 
be limited to approximately 6 months, 
subject to request for 
extension. 

However, we note that this 
may not be sufficient to 
assess the financial and 
operational benefits of 
fintech innovations. It would 
also be increasingly difficult 
to assess the impact on 
financial inclusion and the 
potential risks arising out 
the fintech innovations in 
such a short period of time. 


6 months, 
instead it 
should be 
extended for 
12 months 
(or longer 
period) with 
a 

discretionary 
extension 
available for 
6 months. 


The FinTech 
Unit C'FTU”) 
at the RBI 
should have 
representati 
ves from 
other 
financial 
regulators, 


As per clause 7.1 of the 

Proposed Framework, the 
role of oversight throughout 
the lifecycle of the RS 
process is upon the FTU at 
the RBI. 

We note that there exists an 
inter-regulatory overlap due 
to the convergence of 
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such IRDAI, 

various financial services 






Securities 

and creation hybrid 






Exchange 

products, which are 






Board of 

regulated under different 






India 

sectors, by fintech 






(“SEBI”), 

innovators. We recommend 






Pension 

that representatives from 






Fund 

other financial regulators, 






Regulatory 

such as IRDAI, SEBI, 






and 

PFRDA, DPIIT etc. should 






Developmen 

also be included in the 






t Authority 

composition of FTU under 






(“PFRDA”), 

RBI. 






Department 







of Economic 







Affairs, 







and/or 







Department 







for 







Promotion of 







Industry and 







Internal 







Trade, 







(“DPI IT”) etc. 







to map and 







provide 

8 






guidance on 







the inter- 







regulatory 







issues 







arising out of 
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on 


8 . 


innovative 

fintech 

products and 

services. 


India should 

We note that the UK- 

enter into 

Australia FinTech Bridge 

Fintech 

Agreement between 

Bridge 

Australian Securities and 

Agreements 

Investments Commission 

with other 

and the Financial Conduct 

jurisdictions 

Authority (“FCA”) of UK and 

which have a 

the UK-Singapore FinTech 

conducive 

Bridge Agreement between 

regulatory 

Monetary Authority of 

sandbox 

Singapore and UK FCA 

regime. 

both seek to enable 


collaboration on FinTech 
between governments, 
financial regulators and the 
industry. It encourages 
FinTech innovators to use 
the facilities and assistance 
available in the other 
urisdiction to explore new 
business opportunities and 
reduce barriers to entry. 

We also note that such 
increased collaboration 
provides a novel 
opportunity to enhance 
trade and investment flows 
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i 





between their markets, 

thereby contributing to the 
development of the 

international fintech market. 

A successful case study is 

Crowd2Fund, a UK-based 

fintech innovator that is 

launching an Australian 
office by utilizing the UK- 

Australia FinTech Bridge 
Agreement. This makes it 

easier for Crowd2Fund to 

run operations in the 

markets of both Australia 

and UK and has been able 

to procure company 

licensing in both 

jurisdictions. 

9. 

10 

8.1 

It may be 

clarified 

what kind of 

liability is 

being 

envisaged in 

the 

disclaimer 

that the RBI 

will not bear 

liability. 

It may be the intent to say 

that the sandbox does not 

excuse the liability of the RS 

applicant of complying with 

all applicable laws other 

than those under the RBI’s 

jurisdiction. If so, that 

should be clarified. 

In conclusion, we reiterate our congratulations on the introduction of 
the Proposed Framework and we humbly request the relevant 
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_____ Draft Framework for Regulatory Sandbox 

'department? of the RBI totikT^ feedback into SSiidSita? 
Further, we would be happy to discuss in detail any of our 
suggestions, comments and feedback in this regard. 


18 RBI has notified a Draft Enabling Fran^kfoFf^^ 

| to provide an environment for innovation-led entities for limited-scale 
| testing of a new products/service that may or may not involve some 
relaxation in a regulatory requirement before a wider scale launch 
j We welcome the framework and are please to offer certain 
| suggestions that may further the objectives of this framework. 

| Section 5. Many of the innovations in Fintech startups are contingent 
| on innovations that, as per extant regulations, may require multiple 
j conflicting licenses. Such licenses may even arise across regulators. 

| For example, there are innovative ideas at intersection of trade and 
| credit, as well as insurance and credit. This element of cross-license 
| innovations may be included as a focus area for the regulatory 
| sandbox, in order to enable customer value creation. 

I Section 6.2: There is significant scope for innovation in how the 
objectives around KYC/AML may be fulfilled through use of 
technology. We recommend that those innovations be included in 
| the scope of regulatory sandbox, and Section 6.2 requirements may 
| apply m the sense of preserving the principles rather than the 
| prescription of KYC/AML processes as they exist today." 

| Section 6-3: "Credit Information" has been specified on the negative 

list which may not be accepted for testing. The intent behind this is 
unclear. There are significant advances in credit assessment 
methods, and the information that may feed such assessment 
| models. Innovation around this area is key to financial inclusion, and 
| may be permitted under the regulatory sandbox. 

Section 6.5.1 (a): Restricting the scope of regulatory sandbox to 
___ startups may limit the scope of innovation, especially since many of 
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the innovations in Fintech sector arise through partnerships between 

established financial institutions and startups. Permitting access to 
regulatory sandbox for a wide range of innovators will help further the 
objectives outlined in the draft enabling framework. Similarly, the 
participation of Fintech companies themselves should not be limited 
by maximum turnover or net worth. 

Section 6.5.1 (f): Given that many of the startup innovations 
applying for the regulatory sandbox will have existing regulatory 
constraints, it is unlikely that those products/services would be 
technologically ready for deployment in broader market. Given a 
successful pilot in the sandbox environment, such technology 
readiness can then be achieved, either by the same entity, or by other 
market participants who will also witness the successes in the 
sandbox. This requirement may hence be relaxed." 

"i. There is a need for ""continuation pathway"" for innovations 
admitted to the regulatory sandbox. In absence of such a pathway, 
the very merit of admitting the innovation is compromised. Further, 
absent such a pathway, entrepreneurs and investors would find the 
risk of pursuing such innovations unacceptable. We propose that for 
successful pilots, as defined and agreed by the startup and regulator 
at time of entry into the sandbox, there be a continuation pathway 
comprising of (a) ""next level scale"" relaxation within purview of the 
sandbox relaxations; and (b) time-bound incorporation of such a 
relaxation into prevalent regulations on permanent basis, 
ii. In order to provide clarity to startups opting for the regulatory 
sandbox, we propose that a formal No-Action Letter be issued to such 
startups, capturing the terms of regulatory relaxations available 
during their pilots inside the regulatory sandbox. This will provide 
certainty around these relaxations not just during that period, but also 
as future reference and record of such relaxations. 
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pii. There should be measures put in place to protect the fintech's idea 

from licensed competitors during the regulatory sandbox testing 
| period. 

iv. An agile framework for start-ups to incorporate regulatory / RBI 
feedback while the product is in the regulatory sandbox would add 
| value to the entire process." 

j We firmly believe that technological and data innovations can 
I dramatically enhance the level of financial inclusion in India, and the 
| regulatory sandbox is an important part of the puzzle in enabling such 
| innovations. We will be pleased to engage further, in the process to | 
1 devel °P a truly productive sandbox model for the Indian market. 

~ 19 Entity 19 comme "ds the regulatory sandbox initiative launched by 
| the Reserve Bank of India (RBI) and particularly the intention to 
■ combine a cohort-based approach with the concept of thematic 
sandboxes supporting, among others, the objective of promoting 
financial inclusion in India. We believe that this approach well reflects 
the current context and priorities of RBI. 

Entity 19 has four main concerns regarding the proposed Reserve I 
| Bank of India’s Regulatory Sandbox Framework (the Framework) that 
| are further explained below: (i) the limitation of eligibility to FinTech I 
j start-ups, (ii) the lack of clearly defined objectives and expected 
| change, (iii) the lack of defined exit strategy when a regulatory 
j change proves necessary, and (iv) the missing description of inter- 
| regulatory cooperation. 

| Eligibility: The Framework limits access to RBI’s regulatory sandbox 
to FinTech startups. Start-ups are defined by Govt, of India, DIPP 
| Notification No. G.S.R. 264(E) dated April 11, 2018 but the definition 
j of FinTech is missing and can be only indirectly established from the 
| provisions of Section 6.1 of the Framework. While this lack of 
definition creates some level of uncertainty, more importantly 
restricting the access to regulatory sandbox only to fintech start-ups 
| is potentially creating an uneven playing field with non-fintech I 


96 











Entity No 

Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 


innovators and non-start-ups excluded from the sandbox. | 
survey data show that this approach is also unique (more than 80% 
of the respondents indicated that regulated entities/incumbents were 
eligible for testing in regulatory sandbox). 

While we support the approach where regulatory sandbox is a 
solution reserved for exceptional cases (particularly where new 
entrants are testing untested concepts), we believe that already 
regulated entities (and incumbents) would benefit from the same 
opportunity as they may face similar barriers and risks preventing 
them from innovating (e.g., reputational and compliance risks). The 
importance of innovation by incumbents is also underscored by the 
Report of the Working Group on FinTech and Digital Banking (see, 
e.g., Section 3.2.3, 6.3.2 etc. of the Framework). Further, the 
restricted eligibility may unduly limit potential partnerships between 

incumbents and startups. 

To consider: Expanding eligibility criteria to cover financial service 
providers who are currently regulated. In order to ensure a level 
playing field and safety of testing, incumbents should be subject to 
the same restrictions (e.g., in terms of scale) as testing startups. 
Objectives: The Framework should clearly define the main objectives 
driving the sandbox initiative and the change RBI expects as a result 
of implementing the regulatory sandbox. In our experience, clearly 
defined objectives facilitate implementation, measuring of impact and 
framework modifications if necessary. They also help stakeholder 
communication as relevant stakeholders better understand 
motivations behind the initiative, opportunities it brings along and its 

limitations. 

To consider: Explicitly defining main objective(s) and expected 
change(s) the Framework should achieve. 

Exit: The Framework rightly ties the eligibility for sandbox testing to 
(i) absence of regulation and/or (ii) a need to temporarily ease 
regulations for enabling the proposed innovation (Section 5 of the 
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Framework). The Framework, however, does not indicate any exit 
I P rocess in case of successful testing in the absence of appropriate 
regulatory framework under which the innovator could operate upon 
exit (e.g., when a suitable authorization regime is not available). 

| Given that RBI cannot provide any legal waivers (Section 4.3 of the 
Framework), will it strive to adopt necessary regulatory changes while 
allowing the innovator to operate in a temporary regulatory vacuum 
, or is any other solution envisioned? The issue of test-based 
regulatory change is only briefly listed among general sandbox i 
I benefits in Section 3.1 and 3.4 of the Framework. In this context, it is 
j worth noting that several regulators have signaled their readiness to 
I chan 9 e inadequate rules when necessitated by sandbox testing 
results (e.g., the United Kingdom). 

To consider: Outlining scenarios for regulatory change driven by 
sandbox testing. 

j Co °P erat i°n: The complexity and cross-sectoral nature of recent 
j financial innovations require closer cooperation among financial 
| sector regulatory authorities (and other relevant government 
agencies). This is particularly relevant in a complex regulatory system 
| such as the one in India where innovation may span across mandates 
I of multiple regulators (e.g., IRDAI, SEBI). The framework might need 
| to explain how necessary cooperation will be established and 
implemented to facilitate implementation of RBI’s regulatory sandbox, 
particularly as other regulators are also contemplating their own 
regulatory sandbox initiatives. 

| To consider: Outlining a strategy for inter-agency cooperation (e.g., 
signing and implementing a memorandum of understanding). 

| Specific comments: 

| • Are eligibility criteria listed under Section 5 (i) - (iii) of the Framework 
I cumulative? If yes, could there be instances where application of (i) 
and (ii) would be mutually exclusive? 
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• Does RBI expect the exclusion criteria (Section 6.3 of the 

Framework) to change in a foreseeable future and under what 

circumstance this may happen? 

• Under what circumstances would the sandbox accommodate a 

remittance provider or other innovators using cryptocurrencies as an 
underlying technology and not a product in itself (for instance as a 

mechanism to lower transactional costs and address FX risks)? 

• Why are credit registries and credit information excluded from 
testing? It is reasonable to assume that alternative credit scoring 
(e.g., using non-financial data to complement credit risk assessment) 
might be among the candidates for sandbox testing. Would an 
alternative credit information system testing also be excluded? 

• Is the information shared under Section 6.5.7 of the Framework 

provided only to RBI and on a confidential basis? More generally, in 

our experience, many fintech startups hesitate to participate in a 
sandbox-like initiative when they are concerned with increased 
publicity potentially compromising their IP rights (e.g., vis-a-vis 
proprietary technology), therefore regulators should consider 
explicitly addressing the issue of IP rights protection (which should 
generally rely on the startups that need to seek adequate protection 
on their own and in a due time). This is particularly important in the 
context of broadly formulated Section 9 of the Framework. 

• Will RBI inlcude an application form template in the final version of 

the Framework? 

Finally, we would like to underscore the importance of regulatory 
sandbox being implemented in the context of a broader agenda 
where it becomes one component among other initiatives. Our 
research suggests that complementary initiatives such as FinTech 
offices and innovation hubs provide additional support that reinforces 
the function and impact of regulatory sandbox. 

Please do not hesitate to contact Entity 19, should you have any 
questions. 
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This is with reference to the Draft Enabling Framework for 
Regulatory Sandbox released by RBI dated 18th April 2019 (“Draft 
Guidelines”). RBI has invited comments on the Draft Guidelines 

which contains the structure and mechanism for regulatory sandbox 
in FinTech Sector. 



Please find attached our comments/suggestions on the Draft 
Guidelines, for your kind perusal. 


Points 

pertaining to 

Suggestions/ Answers 

Rationale 

Paragraph 5 - 

The Draft Guidelines 

The Draft 

Eligibility 

structured by RBI 

Guidelines 

criteria for 

encapsulates the 

focuses on the 

participating in 

eligibility of the 

objective to 

the Regulatory 

participants in the 

encourage 

Sandbox 

cohort to only those 

innovations 


applicants that qualify 

which are not 


as a start-up under the 

supported by the 


criteria laid down by the 

existing 


government under the 

framework or is 


DIPP Notification for 

hampered due to 


start-ups, together with 

absence of a 


certain other criteria 

regulatory 
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such as minimum 

structure. 


threshold of net-worth, 

Further, one of 


satisfactory bank 

the key aspects 


accounts and CIBIL 

of the Regulatory 


score, etc. This implies 

Sandbox is 


that other mature and 

financial 


bigger entities are not 

inclusion which 


eligible to avail the 

proposes to 


benefits of testing their 

make the 


innovations in the 

financial services 


Regulatory Sandbox. 

accessible at 


In our humble opinion, 

affordable costs 


the eligibility criteria of 

to all the 


the Regulatory 

individuals and 


Sandbox should not be 

entities, without 


limited only to a start-up 

restricting it only 


but should consider the 

to start-ups. 


qualitative parameters 

Therefore, such 


such as the novelty in 

limited approach 


the innovation, the 

to the eligibility 


utility to the public and 

criteria for 


the viability of the 

participation in 


solution provided by 

the Regulatory 


such innovation, 

Sandbox is in 


irrespective of the entity 

variance with the 


being a start-up. In view 

objective of 


of the same, all 

financial 


categories of FinTech 

inclusion 


concerns should be 

enumerated in 


allowed to test their 

Draft Guidelines. 


products/services in the 

It has been 
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Authority 

(“FCA”), the 

FTU equivalent 

of U.K., unless 

certain 

exemptions 

apply. 

Further, 

Paragraph 5 of 

the Draft 

Guidelines do 

not take into 

account the 

adverse impact 

on the growth 

and durability of 

innovations, 

created by the 

firms or entities 

of higher stature, 

due to the 

narrow 

opportunity given 

to only start-ups 

to test their 

innovations. 


Paragraph 6.5- 
Fit and Proper 

Criteria for 

Selection of 

Participants in 

In light of the eligibility 

criteria and the fit and 

proper criteria enlisted 

in the Draft Guidelines 

for the participants, the 

On analysing the 

models of 

FinTech 

regulatory 

sandboxes in 
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Regulatory 

Sandbox 


decision of adjudging a 

suitable participant for a 
cohort is solely 
shouldered on the 
FinTech Unit (“FTU”) at 
the RBI. Further, the 
Draft Guidelines do no 
propose any indicator 
or parameter for 
substantiating such 
decision of FTU. 

Therefore, it is our 
humble suggestion, 
that the draft guidelines 
or a subsequent draft 
defines the various 
positive and negative 
indicators or 

parameters of each of 
the eligibility criterion 
provided in the Draft 
Guidelines, that may be 
considered by FTU 
while checking the list 
and deciding if the 
applicant is fit and 
deserving to be a part of 
the cohort under the 
Regulatory Sandbox. 

On the other hand, it 
could also be 


various 

jurisdictions, in 
our point of view, 
the factor o 
eligibility of any 
applicant should 
be based on 
certain pre¬ 
determined 
foundations in the 
form of indicators 
or parameters. 
The 

understanding of 
the FTU and the 
broad essentials 
provided in the 
Draft Guidelines 
cannot be 

considered as the 
sole criterion for 
determining the 
novelty, viability 
or the efficiency of 
any concept of 
innovation. 

For instance, the 
Project Innovate 
of the United 
Kingdom, 
provides for an 
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suggested that the FTU 
releases the temporary 
list of such indicators for 
each cohort, which 
should be in line with 
their expectations or the 
key areas of ambiguity 
of regulatory framework 
in India. 


exhaustive list of 
signs to gauge 
the standing of 
the applicants in 
the cohort, to 
facilitate clear 
and undisputable 
decisions, with 
respect to the 
benefaction to 
the applicants for 
participating in 
the project. 


In order to avoid 
autonomy of the 
FTU unit and to 
provide the 
applicants a fair 
and clear idea 
about their 
eligibility, the list 
of indicative 
actions and 
parameters 
should be 

provided. The 
inclusion of the 
same would act 
as a mirror to the 
prospective or 
future applicants 
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of the Regulatory 

Sandbox. 


Paragraph 6.6 
- Extending or 
Exiting the 

Sandbox 

The Draft Guidelines 

record that the 

Regulatory Sandbox 
participants would be 

entitled to seek 

extension of the testing 
timeline on the ground of 
an application given by 
the participant to the 

stating valid reasons to 

support the extension. 

Subsequently, on the 
discretion of the FTU, 
the timelines may be 

extended or not 

extended for the 

participant. However, 

the Draft Guidelines do 

not provide for the 

measures on the basis 

of which the decision of 

extension will be taken. 

This increases the 
scope for ambiguity. 

In our suggestion, the 
FTU should be guided 
by specific parameters 

to decide on extending 

In our view, the 

autonomy of the 

FTU should be 

maintained in the 

Regulatory 

Sandbox 

together with 

certain guiding 
principles and 

parameters. The 

basis of the 

same is to 

enable the 

prospective 

applicants and 

the existing 

participants to 

have with an 

established 

mechanism of 

entering, 

operating and 

exiting the 

Regulatory 

Sandbox, if 

required, in a 

structured and 

unbiased 

manner. Also, 
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the program and settle 

the plan of action. 

In addition to this, for 

cases wherein the 

participant may exit on 

his own, a procedure 

should be set in place 

for such exit and the 

manner in which the 

further actions would be 

taken by the participant, 

post such exit. 

the absence of 

conditions with 

respect to the 

extension of 

period in 

Regulatory 

Sandbox might 

not only cause 

ambiguity and 

diminished 

planning but 

would also lead 

to a situation of 

compromise in 

fairness in 

exercise of 

discretion. 

In addition to 

this, the lack of a 

prescribed 

voluntary exit 

plan and clarity 

regarding the 

conduct of the 

participant after 

such exit would 

lead to ambiguity 

and procedural 

delay in case of a 

dispute. 
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stake holders on 


Paragraph 7 - 

The Draft Guidelines 

The concept of a 

The Sandbox 

provides for the 

regulatory 

Process and 

adjudgment of the fina 

sandbox 

Stages in a 

outcome of the 

functions on the 

Regulatory 

experiment conducted in 

objective of 

Sandbox 

the Regulatory Sandbox 

determining the 


in the last stage. 

gaps or 


However, it is silent on 

loopholes in the 


the benefits/relaxations 

existing 


that would be accordec 

regulatory 


upon by the FTU post 

framework or 


the successful 

attempts to 


completion of the 

provide for a 


experiment under the 

framework in 


Regulatory Sandbox, as 

case of absolute 


per the guidelines 

absence of law in 


provided by FTU for the 

relation to the 


respective test design of 

subject 


the applicant. This might 

innovation. 


lead the participants to 

However, the 


Delieve that their time, 

structure and 


efforts and money might 

mechanism 


be futile. 

under the Draft 


our humble 

Guidelines fails 


suggestion, the FTU or 

to address the 


RBI should be 

issue, creating 


shouldered with the 

an ambiguity for 


responsibility of outlining 

the prospective 


the impact of a 

applicants. 


successful 

The applicants 


experimentation and 

will be unclear 

- 1 . 
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advocating 

modifications or drafting 
of any regulatory 

structure, framework, 

etc, as may be required 

on case to case basis. 

about the course 

of action post the 

successful 

experimentation 

of the innovation 

in the sandbox 

environment. 

The Draft 

Guidelines do 

not address the 

status quo of the 

situation of the 

participate, post 

its exit from the 

Regulatory 

Sandbox. The 

entity shall be 

mandated to 

comply with the 

same statutory 

requirements or 

despite 

successful 

completion of 

Regulatory 

Sandbox testing. 

With a view to 

rewarding the 

time, money 

and effort put in 

by the 
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participants and 

their contribution 

towards 

assisting in 

regulatory 

framework, the 

participant 

should be 

accorded 

benefits provided 
the participant is 
able to pull off a 

successful 

testing. 


Paragraph 

6.1.1 

Innovative 

Products/Servi 

ces 

Paragraph 6.2 - 
Regulatory 

Requirements/ 

Relaxations for 

Sandbox 

Applicant 

Per the list of eligible 
and permissible 

innovative products and 
services, Digital KYC is 
an open ground for any 
applicant allowing the 
participant to innovate in 

the said arena. 

However, contrary to 
such permission, the 

Draft Guidelines, 

mandate the 

participants to abide by 
the regulatory 

requirements related to 

KYC/AMLVCFT, as 

The contradiction 

posed by the 

Draft Guidelines 

in the permissible 

arena of 

innovation and 

the required 

compliances will 

necessitate the 

participates 

working in this 

arena to strike an 

unjustifiable 

balance between 

the two positions. 

Further, in the 

attempt of 

- 1 . 
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necessitated under the 

attaining 

such 

existing laws. 

balance, 

the 

The contradiction in the 

participant 

might 

permissibility and the 

be compelled to 

entailed restriction on a 

compromise 

with 

particular arena will give 

the innovation or 

rise to a debateable 

defeat 

the 

dispute for the 

purpose 

of 

participants and inhibit 

entering into a 

their innovation. The 

regulatory 


reason for the same 

sandbox 


being the need of 

altogether. 


balancing the two 

We understand 

positions under the Draft 

that in 

the 

Guidelines. In addition 

practical 


to this, there is a 

parlance, 

the 

regulatory gap in the 

participant might 

existing restriction on 

find it extremely 

performing digital KYC 

difficult 

and 

and the regulatory 

tedious to be able 

sandbox environment 

to work on 

the 

permitting such 

proposed 

test 

innovation. 

design i 

while 

In our humble 

complying 

with 

suggestion, the Draft 

the existing laws. 

Guidelines should be 

Furthermore, 

the 

made clearer as 

participant 

will 

to what extent the KYC/ 

have 

no 

AML/CFT requirements 

encouragement 

would have to be 

for entering into a 

complied by the 

regulatory 
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participants during the 
course of Regulatory 
Sandbox provided the 
participant ensures the 
complete security and 
protection of the 
customer data. 

Alternatively, a 

restriction can be placed 
on the permissible 
product or service 
related to digital KYC 
and the ways it can be 
innovated or modified 
for participation in the 
Regulatory Sandbox. 


stake holders on 

sandbox owing to 
the fact that the 
participant would 
be induced to the 
same regulatory 
environment 
inside the 

sandbox as the 
outside the 

sandbox. 


In addition to this, 
the purpose of 
RBI and FTU to 
permit the 

innovations in this 
sector will also be 
defeated as the 
RBI would fail to 
gauge the 

difference 
between the 
regulatory 
circumstances 
inside and outside 
the Regulatory 

Sandbox. 


Paragraph 6.2 
Regulatory 
Requirements/ 
Relaxations for 


The Draft Guidelines’ 
approach towards the 
resolution of any 
regulatory discrepancy 
or hassle, with respect 


We opine that the 
implementation of 
the present 
approach, as 
guided by the 
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Sandbox 

Applicant 


to a particular financia 

related technology, and 
determination of the 
same on the basis of the 
experimentation of a 
singled-out start-up is 
monopolistic in nature. 
In addition to this, such 
subjective redressals to 
a particular start-up 
might create hindrances 
in market entrance as 
the same might create a 
monopolistic position for 
the participant start-up 
Further, the Draft 
Guidelines state that the 
RBI can grant relaxation 
from regulations to the 
Regulatory Sandbox 
entities on a case to 
case basis. 

In our humble 
suggestion, instead of 
the present approach, 
the Draft Guidelines 
should contain a uniform 
scheme of exemptions 
against which the 
individual cases can be 
tested rather than 


Draft Guidelines, 
would lead to a 
monopolistic 
regime where 
some Regulatory 
Sandbox entities 
would have an 
upper hand over 
the others by way 
of regulatory 
exemptions. On 
the other hand, if 
there is a uniform 
set of principles 
and conditions 
governing the 
grant of 

exemptions, all 
the entities would 
be at an equal 
footing leading to 
a fair testing 
procedure. 
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conferring a subjective 
decision-making power 
on to RBI or FTU. 


stake holders on 


Paragraph 8 - | The Draft Guidelines, at 

Statutory and | multiple junctions, clears 
Legal Issues j RBI of any liability or 
damage that may arise 
during the course of the 
testing in the Regulatory 
Sandbox or on failure of 
the test. This implies 
that the applicant would 
be solely responsible for 
its conduct while in 
Regulatory Sandbox 
and any damage or loss 
that may have to be 
incurred at that point of 
time. This might cause 
the participant to 
exercise excessive 
caution and hindrance 
towards 

experimentation which 
would defeat the 
purpose of entering the 
Regulatory Sandbox. 

The Draft Guidelines 
should provide for an 
insurance mechanism 
for the cohort or the 


In consideration 
of the objective 
of any regulatory 
sandbox, such 
an approach of 
outright denial of 
liability during 

the testing period 
of the Regulatory 
Sandbox will 

defeat the 

purpose of 
entering into a 
sandbox. The 

regulatory 
sandbox poses 
the advantage of 
letting the start¬ 
ups to 

experiment and 
develop on their 
innovation in a 
secure and risk¬ 
less 

environment. 
However, with 
the liability being 
put on the 
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respective participants 
for any loss or damage, 
on the basis of expected 
damages and 

associated risks, that 
may be incurred during 
the testing process. 

Alternatively, the 

guidelines should 
contain certain 

exceptions to this 
necessity of outright 
indemnity of the 
regulator, considering 
he amount of powers 
hat the RBI possesses 
with respect to approval 
of Regulatory Sandbox 
applications. 


stake holders on 

shoulders of the 
newly 

incorporated 
participant, in 
absolute sense, 
may discourage 
such start-ups 
from 

participating in 
the Regulatory 
Sandbox. 


With the 

implementation of 
a cohort 

insurance, the 
participants may 
sense a security 
for entering into a 
Regulatory 
sandbox and 
encourage more 
innovations. 
Subjecting the 
risk under the 
Regulatory 
Sandbox, the 
liability of the 
expected or 
unexpected 
losses cannot be 
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headed to the 

participant alone. 


Paragraph 9 - 

Disclosure 

The paragraph relating 
to disclosure bestows 

the RBI an absolute 
right to RBI to publish 
any information about a 

Regulatory Sandbox 
participant on its 
platfrorm. The said right 
provides the regulator a 
broad and unbound 
leverage to publish any 
information, which at 
times may be 

disadvantageous to the 
participant. Such 

information includes the 

publication for transfer 

of knowledge and 

collaboration with other 
international regulatory 
agencies. This exercise 

of this right should be 

made subject to certain 

well-defined 

parameters for better 

operation of Regulatory 
Sandbox. Further, the 

right should have a 

carve out for the 

We understand 

from the 

regulator’s 

perspective that 

the publication of 

information 

regarding the 

participants 

cannot be 

curtailed with 

restrictions. 

However, to 

balance the rights 
of the participant 
and to provide a 

sense of 

assurance to the 

participant, the 

intellectual 

property should 

be carved out 

from the absolute 

authority Such 

an absolute right 
might 

compromise the 
confidentiality of 
Regulatory 

Sandbox entities, 
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protection of the 

intellectual property 
rights, in order to give 
the Regulatory 

Sandbox participants a 
sense of assurance. 


Paragraph 7 - ' The Draft Guidelines 
Fast Track ■ provides for a standard 
Approvals ! timeline and 

mechanism for all kinds 
of entities, irrespective 
of the nature of the 
innovation or the 
degree of risks involved 
with such innovation. 

In our humble 
suggestion, the draft 
guidelines should 
provide for a process of 
fast track approval, with 
expedited timelines, 


which would 

become 

vulnerable if 
sensitive details 
about the 

innovation and 
the test design 
are broadcasted 
by the RBI on its 
website. The 
start-ups in 
Regulatory 
Sandbox at a 
nascent stage 
might not be fully 
protected. 


We are of the 
view, that many 
viable solutions 
and innovations 
fail due to 
procedural delays 
and complexities 
which further 
leads to 

discouragement 
to the start-ups at 
nascent stage to 
launch their 
innovation. By 
providing 
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for the successful 
completion of the 
testing under the 
Regulatory Sandbox. 
The same may be 
made applicable for 
such entities which may 
pose a low degree of 
risk and which may not 
require many changes 
in the regulatory 
structure or there is not 
much gap in the 
regulatory structure. 

Secondly, going 

forward RBI should also 
consider running 
various cohorts 

simultaneously under 
the regional offices of 
RBI. This will expand 
the reach and would 
help FinTech 

companies in capping 
their costs. 
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^ tjiy "° | Public Comments/ Feedb^k received from^sta^ke^holdeFs on 
Draft Framework for Regulatory Sandbox 

"ease ™ attached word and PDF versions ot our comments on the 
draft framework for a regulatory sandbox. 

Feel free to reach out to us if you require any clarifications in 
connection with our feedback. 

This has reference to the draft “Enabling Framework for Regulatory 
Sandbox issued by the Reserve Bank of India (“RBI”), with a view to 
introduce an appropriate framework for a 'Regulatory Sandbox’. The 
RBI has invited comments to the framework by May 8, 2019 
Below is a table summarizing Entity 21 comments on some of the 
proposals in the Draft Framework. 

Where no comments are made, Entity 21 views do not differ from the 
proposals set out in the Draft Framework. 



Section 

Proposed 

Regulation 

Inputs and Comments 


4. 

4.3 

A monetary limit may be introduced, 


Regulatory 

Waiver of 

below which participants will not be 


Sandbox: 

Liability by 

responsible to bear regulatory fines/ 


Risks and 

RBI, 6.9 - 

penalties. 


Limitations 

Consumer 

Protection, 

8.1 

Statutory 
and Legal 

Issues 

Imposing liability entirely on 
participants may disincentivise them 
from innovating and participating in 
the RS. A participant (particularly 
start-ups, which usually do not have 
surplus funds) may not be willing to 
bear regulatory fines or penalties for 
minor and/or unintentional breaches. 


5. 

The focus 

Absence of regulations maybe 


Regulatory 

of the RS 

clarified to include instances where 


Sandbox: 

will be to 

more than one set of regulations 


Eligibility 

Criteria for 

encourage 

innovations 

appiy, in part. For e.g., hybrid payment 
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Participatin 

g in the 
Sandbox 


where there 

is an 
absence of 
governing 
regulations. 


models that involve an element o 

lending. 


6. Design 

Aspects of 
the 
Regulatory 
Sandbox 


6.1 

Sandbox 
Cohorts and! 
Product/ 
Service/ 
Technology, 
Section 6.6l 
- Extending 
and Exiting) 
the Sandbox 


Consumers may take time to 
understand and implement new digita 
technologies. Participants should be 
able to extend the RS timelines (with 
the RBI’s permission) if they think that 
the public needs time to adapt. 


6.1 

Sandbox 
Cohorts and 
Product/ 
Service/ 
Technology, 
6.4 

Number ol 
entities to be[ 
Part o 
Cohort 


Currently the Draft Framework 

provides that only a limited number of 
entities can participate in the RS a 
particular time (i.e., 10-12), However, 
there may be several prospective 
entities (Indian and overseas) that 
satisfy the requirements for 
participation, but cannot be enrolled 
due to the threshold having been 
filled. 

The Draft Framework should clarify 
that this limit is flexible, and may be 
varied at the RBI’s discretion. 
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6 . 1 . 1 . 
Innovative 
Products/ 
Services 


It may be clarified that the product 
may be a combination of these 
services. 


6.1.1. 

Innovative 

Products/ 

Services 

It may be clarified that the RBI may 

add to the list of products and services 
to allow for innovative products. 

'6.2. ” 

Regulatory 

Requireme 

nts/Relaxati 

ons for 

Sandbox 

Applicant 

Statutory restrictions may be waived 

, in consultation with the RBI for the 
duration of the RS project. For 
instance, a Fintech entity can carry out 
lending activities in connection with its 
product without a Bank/NBFC license. 


6.2 

Data theft and intellectual property 

Regulatory 

protection is a primary concern for all 

Requireme 

participants introducing new 

nts/ 

technologies. Provisions dealing with 

Relaxations ' 

confidentiality of proprietary 

for 

information should be introduced for 

Sandbox 

Applicant, 

6.5.1 - Fit 

and Proper 

Criteria for 
Selection of j 
Participants 

in RS-Part 

all parties involved. 


121 













Entity No 


"Public Comments/ Feedback from stakeholders^ 

Draft Framework for Regulatory Sandbox 

6 5 Fit and I Incorporation in India entails cost and 
Proper procedural compliance. This may 
Criteria for. disincentivize foreign solution provider 
Selection of from applying, and prevent innovative 
Participants solutions from being applied in India, 
in RS - Part Local incorporation should not be 
I required as a pre-condition of 
application. This may be specified as 
a continuing condition if selected for 
the RS. 

6.5 Fit and I Other incorporated entities like LLPs, 

Proper i etc., may be allowed to increase 
Criteria for | flexibility for the applicants. 

Selection of 
Participants 
in RS - Part 
(a) 


6.5 Fit and Similarly, high minimum net worth 

Proper requirement may disincentivize 
Criteria for I applicants. This may be 
Selection of reduced/waived off for applicants, on 
Participants | a case-to-case basis, 
in RS-Part 
(b) 


6.6 

The discretionary discontinuation of 

Extending 

the RS by the RBI may be a 

or Exiting 

disincentive for participants. Any 

the 

discontinuation should be subject to 

Sandbox 

reasonable advance notice and 


consultation. 
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9. 

Disclosures 

RBI may 

publish 

relevant 

information 

about the 

RS and 

applicants. 

It may be clarified that such 

information would not include 

proprietary product information or 

trade secrets. 

Additional 

Suggestion 


It should be clarified that once the 

participant exits the RS and obtains 

necessary licenses, it should not be 
required to participate in the RS again 

when they introduce any changes or 

enhancements to their technology - 

such changes can be dealt with under 

the license issued to the participant in 

consultation with the RBI. 


22 

At the outset, we are delighted to note the proposed development of 
Regulatory Sandbox (RS) aimed at encouraging innovation across 
financial products and services. We firmly believe that the industry 
can drive financial inclusion, operational efficiency, superior product 

development processes and customer service with enhanced and 

differentiated use of technology. Therefore, RS shall play a crucial 
role in this regard, by creating a well governed environment to run 
calibrated projects. 

With reference to the draft “Enabling Framework for Regulatory 
Sandbox" guidelines released on 18th April 2019, we would like to 

submit the following: 

Section 4.4: We propose that for successful pilots, as defined and 

agreed by the entity and the regulator at time of entry into the 
sandbox, there be a define pathway comprising of (a) “scale up 
phase” within purview of the sandbox relaxations; and (b) time-bound 
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incorporation of such a relaxation into prevalent regulations on 
permanent basis so that the entities who invests time and effort to 
drive sustainable innovation may be able to prepare for scale up and 
ensure continuity of product/service till formal regulatory approvals 
are obtained. 

Section 6.2: There is significant scope for innovation in how the 
objectives around KYC/AML may be fulfilled through use of 
technology. We recommend that those innovations be included in the 
scope of regulatory sandbox, and Section 6.2 requirements may 
apply in the sense of preserving the principles rather than the 
prescription of KYC/AML processes as they exist today. 

In order to provide clarity to entities entering the regulatory sandbox, 
we request that a formal “No-Action Letter” may be issued, capturing 
the terms of regulatory relaxations available during their pilots inside 
the regulatory sandbox for the specific innovation that the entrant 
proposes to demonstrate. This will provide certainty around these 
relaxations not just during that period, but also as future reference 
and record of such relaxations. 

We are also attaching a concept note for your kind perusal, 
demonstrating innovation in three important aspects - 


We shall be honoured to participate further in the program and are 
committed to share all requisite information for necessary 
assessment/screening by the esteemed Regulator. 
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Governments worldwide recognize the importance of the fintech 
industry in the context of their overall economic growth and it is 
imperative for India as well to match the global initiatives for this 
promising domain. Innovation is transforming the financial services 
industry at a rapid pace, with the fintech sector at the forefront of it. 
From large public/private sector banks to start-ups, there is growing 
participation from new players offering unique product offerings. With 
the fintech sector witnessing such fast paced progress, it has become 
important to develop a governing mechanism that can further guide 
the growth of this sector, while providing the regulatory oversight that 
ensures effective consumer protection. 

The introduction of “Regulatory Sandbox” by RBI is set to be an 
effective catalyst that will encourage the sector growth. The 
opportunity given to stakeholders by the RBI to share their concerns 
in response to the draft framework is a welcome step and we thank 
the RBI for the same. While the framework, as it stands, is a great 
first step, there is still scope for accommodating suggestions for 
reforms. 

With a view to making the regulations more effective and impactful, 
we are proposing the following recommendations (attached) on the 
Draft ‘Enabling Framework for Regulatory Sandbox’. 

We hope the inputs are useful and will be considered by RBI. We can 
we reached out at the coordinate mentioned below for any specific 
queries on the submission. 

The introduction of “Regulatory Sandbox” is set to be an effective 
catalyst that will help encourage the sector growth. The opportunity 
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given to stakeholders by the RBI to share their concerns in response 
to the Draft Framework is a welcome step and we thank the RBI for 
the same. While the framework, as it stands, is a great first step, there 
is still scope for accommodating suggestions for reforms. With a view 
to making the regulations more effective and impactful, we are 
proposing the following recommendations: 

Key Issues 

Rationale 

Recommendations 

Regulation 

pertaining to 

entry: The 

draft framework 

mandates only 

start-ups that 

are up to 10 

years old and 

with a turnover 

not exceeding 

INR 100 crore 

to participate in 
the regulatory 

sandbox. This 

norm disallows 

collaborations/ 

strategic 

partnerships 

between start¬ 
ups and 

incumbents. 

The mandate for 

eligibility of an entry 

should be based on 

the strength of the 
idea, with aspects 

such as the net 

worth and firm’s 

experience to be 

secondary. The 

restriction on 

partnership between 

start-ups and 

incumbents would 

constrain innovation 

and adversely 

impact the ability of 

small entities from 

innovating and 

competing. Further, 

the draft also 

restricts the entities 

that do not fulfil the 

definition of a start¬ 
up, which may 

RBI should consider a 

more inclusive entry 

selection criteria based on 

the effectiveness of the 
solution/ idea proposed by 
an entity. Certain 

relaxation can be 

provided under the “Fit 

and Proper” criteria. 

The RBI should not 

restrict partnerships 

between start-ups and 
incumbents as many 

start-ups leverage current 
technology and expertise 

of incumbents to build 

new models around it. 

Most regulatory 

sandboxes such as 

Australia, Hong Kong, 

Canada and the EU allow 

incumbents to participate 
in collaboration with start¬ 
ups. 
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restrict some 

players from 

participating in the 

sandbox. 


Inadequate 

system for 

legal support: 

As per the draft 

framework, the 

RBI only 

provides limited 

legal support 

and does not 

offer any legal 

waivers to 

entities 

participating in 

the sandbox. 

The regulation 

does not clearly 

define what 

shall be 

covered under 

the term “legal 

waiver”. 

It doesn’t align with 

the spirit of a 

sandbox, an 

instrument designed 

to provide a safety 

net to the 

innovators. This 

may further affect 

the confidence of 

the participants, who 

may feel reluctant to 

test their products. 

Therefore, it is 

pertinent that the 

RBI clarifies the 

legal relaxation that 

the fintech 

companies would be 

offered during the 

sandbox period. 

The RBI should issue a 

“legal wavier” to an entity 

against any adverse 

regulatory action during 

the period of the sandbox 

trial. 

□ An instrument of legal 

wavier with clear definition 

should be developed to 

increase participation of 

the innovators and to 

safeguard the rights of the 

consumers. The RBI can 

look into the “No Action 

Letter” issued by the 

Consumer Finance 

Protection Bureau. 

Inadequate 

system for 

protection of 

intellectual 

property: The 

draft framework 

This norm will result 

in significant loss of 

confidence amongst 

the applicants, 

especially those 

who don’t have 

The RBI should develop a 

clear mechanism for the 

protection of intellectual 

property rights. 

RBI should ease the 

mandate pertaining to 
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provides non-1 patent 


assuring 

protection 

mechanisms 


rights, I sharing of any data about 
potentially J results/ outcome, with a 

increasing the risk of view to encouraging 
leaking confidential innovators, whether big or 
for innovators’ | information in the J small, to participate, 
intellectual public domain. The 
property. it j sandbox should 

requires the work more strongly 

participants to towards protecting 

share the PoC j the confidential 

(proof of ideas/products 


content) 

results, 

wherein RBI 
hold the rights 
to circulate any 
sort of related 
information, 
including 
technology 
transfer. 


developed by the 
innovators. 


Exclusion of I RBI’s decision to j RBI should not exclude 

crypto-related keep cryptocurrencies from the 

star *" cryptocurrencies, sandbox as it potentially 

ups/entities: In trading of hinders innovation around 

the draft j cryptocurrencies important technologies 
framework, the I and initial coin J like blockchain. A 
^ as offerings out of the regulation around crypto 
excluded | purview of the should be worked upon 

crypto-related | regulatory sandbox instead of imposing a 

start ~ 1 ma y potentially blanket ban. 
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ups/entities 

from using the 
regulatory 

sandbox, 

though 

blockchain 

start-ups have 

been allowed. 

restrict innovation. 

The cryptocurrency 
is an important 

component of the 

blockchain and 

without its inclusion 

in the sandbox, it will 

be a challenge to 

test smart contracts 

and other approved 

blockchain 

technologies. 

The regulatory sandbox 

should be open to newer 
technologies and 

innovations. The platform 

is intended to act as a 

mentioning instrument for 

the innovators and thus 

should not be limited to 

few technologies only. 

Exclusion of 

credit 

information: 

The draft 

framework 

proposes a list 

of positive 

activities that 

can participate 

in the 

regulatory 

sandbox and 

similarly a 

negative list. 

One of the 

exclusions is 

"credit 

information" 

which poses 

The exclusion of 

credit information as 

an activity that can 

be sandboxed 

potentially inhibits 

innovation, 

contradicting the 

basic principle of a 

regulatory sandbox. 

The exclusion would 

restrict innovation 

when it is severely 

required. The 

inclusion would 

enable leveraging of 

alternative data (like 
utility/telecom 

payments) as credit 

information (for 

Credit information should 

be added in the positive 
list of activities, eligible to 

be sandboxed under the 

framework. The credit 

information is important 
from the perspective of 
fostering innovation 

towards financial inclusion 

in the country. 


129 












-V 


j Public Comments/ 


certain 

discerning 

apprehensions. 

creditworthiness). It 


is a given fact that 


credit remains 


under-penetrated in 


our economy, and 


this exclusion would 


further worsen the 

Horinro 1 D a 

situation. 


Post-sandbox testing, a successful experimenter may still require 
regulatory approvals, prior to the product and services or 
technology being allowed for wider use in the open market. The 
RBI should allow the successful products to be directly launched 
in the open market, basis the regulatory approvals acquired 
during the testing. 

The time period of 26 weeks for sandbox testing is not sufficient 
given the geographical expanse of our country, diversity of 
languages and the disparate levels of access to technology and 
banking instruments. It is recommended that the RBI considers a 
more viable time frame. 

The RBI has made it mandatory for the participants to mention an 
acceptable exit and transition plan. By virtue of its nature, a 
regulatory sandbox is supposed to provide a test bed for ideas, 
some of which will take elaborate time to mature and further, those 
final ideas may actually be tweaked/ modified vis-a-vis their 
original form. Thus, a clear exit clause seems to be making too 
many suppositions and restricting the very process of innovation. 

It is recommended that the RBI consider easing the clause to 
facilitate innovation. 
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^ | At the outset we would like to congratulate the Reserve Bank of India 

| (RBI) for taking this positive step towards enabling a regulatory 
I sandbox and seeking public comments on the proposed framework. 

I As the representative of the information technology industry, we also 
| thank RBI for this opportunity to present our views and suggestions 
| on the draft Enabling Framework for Regulatory Sandbox which is 
aimed at promoting financial inclusion in the country. 

■ Based on inputs from our members and other stakeholders, we have 
prepared our feedback which has been attached with this email. We I 
| are happy to provide further clarification and assistance on any of the 
I issues pertaining to our submission. 

1. Eligibility criteria 

According to the draft framework, “the target applicants for entry to 
| the regulatory sandbox are FinTech firms which meet the eligibility 
I conditions prescribed for start-ups by the government.” Accordingly, 
the companies which have been incorporated or registered for over 7 
years with the exception of firms in the biotechnology sector - for 
| which the prerequisite is 10 years, and additionally have a turnover I 
| of more than Rs 25 crore in any budgetary year since their | 

I incor P° ra tion or registration, are barred. The proposed regulations I 
exclude FinTech firms who are not start-ups as per the above 
| definition. This would exclude innovation of a collaborative nature 
I between incumbents and start-ups, constricting the efficient 
functioning of a sandbox. Many start-ups leverage current technology 
| and expertise of incumbents and build around that - most regulatory I 
| sandboxes Australia, Canada and EU allow incumbents and in fact I 
I Hong Kong only allows established companies. 

Suggestion: The scope of the regulatory sandbox should include 
| start-ups and established firms as the objective is beyond | 
j encouraging start-ups - it is to encourage innovation with safeguards I 
I and oversight. As long as the innovation is intended for the Indian 
market, it should be eligible. 


131 






"EmitTNi | Public Comments/ FeedbaST-ecei^dFo^^ke ^Ider^T 
Draft Framework for Regulatory Sandbox 
2. Number of FinTech entities to be part of a cohort 

While we understand the stand of the RBI to be selective about the 
FinTech entities participating in the sandbox, we do not agree with 
the provision in the draft guidelines which says, “the focus of the 
regulatory sandbox should be narrow in terms of areas of innovation, 
and limited in terms of intake. The regulatory sandbox shall begin the 
testing process with 10-12 selected entities...” After our consultation 
with various start-ups, we are of the view that the number of start-ups 
engaging should not be capped to 10-12, but to most of the eligible 

cases. This will allow greater flexibility while shortlisting the 
participants. 

Suggestion. The guidelines should not specify a cap. The criteria 
and the selection process should determine the eligibility. If more 
start-ups qualify then that should be welcomed. Issues around 
capacity in managing the sandbox should be appropriately addressed 
to meet the requirements. 

3. Exclusion from sandbox testing 

In the draft guidelines, the RBI has provided an indicative negative 
list of products/services/technology which may not be accepted for 
testing. These include, credit registry, credit information, crypto 
currency/crypto assets services, trading/investing/settling in crypto 
assets, initial coin offerings, chain marketing services and any 
product/services which have been banned by the regulators. 

The RBI had in April 2018 prohibited banks, NBFCs and Payment 
System Provides in dealing with Virtual Currencies due to the various 
risks associated in dealing with such virtual currencies. An earlier 
circular issued in 2013 lists out the risks. These include hacking, loss 
of password, compromise of access credentials, malware attack, and 
lack of consumer redress, volatility / speculation, legal concerns and 
money laundering. Conceptually, a better understanding of the risks 
can be developed in a sandbox and it can help determine the 
appropriateness of the safeguards required. Other progressive 
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regulators including UK, allow such innovations to participate in their 

regulatory sandbox. In any case, products which are prohibited in 
India will not be permitted in the market, however, it might still be 
useful to not exclude them for the purpose of sandbox as that can 
help the regulator develop a better understanding of the risks. The 
FinTech industry could also participate with an understanding that 
acceptance in a sandbox would not automatically qualify them for any 
regulatory waiver. 

The regulations aim to exclude other products/ services and 
technologies which are not otherwise prohibited. Removal of "credit 
information” as an activity that can be sandboxed potentially inhibits 
innovation around leveraging alternative data (like utility/telecom 
payments) for discerning creditworthiness of customers. We are of 
the view that at a time when credit remains under-penetrated in our 
economy, this exclusion will foreclose innovation where we need it 
the most. 

Also, the decision to keep cryptocurrencies, trading of 
cryptocurrencies and initial coin offerings out of the purview of the 
regulatory sandbox, is still not clear. Since crypto coins and tokens 
are an important component of the block chain technology, the draft 
regulations appear to exclude testing of smart contracts and other 
approved block chain technology under the sandbox. 

Suggestion: Products and services which are otherwise not 
prohibited under regulations should not be excluded from the 
sandbox. These would include credit information, credit registry and 
applications of block chain/ DLT etc. Dealing in virtual currencies by 
banks etc. is prohibited by the RBI. However, these should be 
permitted in the sandbox with an understanding that participation in 
sandbox would not entitle them to any regulatory permission. This 
would be aligned to the objective of enabling innovation with 
adequate safeguards. 

4. Criteria for Selection of Participants 
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| The entire sandbox process is divided into different stages which will 
| last for a total period of 26 weeks. While we understand that this time 
I period is almost same as the 6 months’ duration considered as 
'appropriate duration for testing' by the UK's Financial Conduct 
Authority (FCA), it seems to be less in the Indian context given the 
| geographical spread of our country, languages and different levels of 

access to technology and banking instruments. Thus, this may not be , 
I a viable time frame. 

Suggestion: We would like to suggest that applicants should | 
| themselves specify the expected time frame for the test and the RBI | 
| should then decide the time frame based on the need to the company. I 
I An upper time-limit of one year may be provided which should be 
| extendible by another six months based on the merits of such 
| request, if any, from the applicant. 

| 6. Risks and limitations 

| There is a lack of clarity on the legal relaxation that would be provided I 
to FinTech companies during the sandbox period. The framework 
| mentions that one of the limitations of the sandbox may be the 
- inability of RBI to offer any legal waivers. Since regulatory relaxation 
appears to be a necessary condition for a sandbox experiment and it 
is a form of (limited) waiver, it is not clear what is intended to be 
covered by the expression “legal waiver". 

I Su 99estion: We understand that RBI cannot give regulatory waiver 
I from a law. However, it can frame regulations which are conducive to 
| the enablement of an effective sandbox and also give waivers from 
| specific regulations framed by it for the sole purpose of testing. As 
| part of the sandbox tools, it can also guide the entity on how the RBI 
| regulations may apply to the proposed innovation. UK, for example, 
provides for such tools including - limited authorisation for the 
purpose of testing, waiver or modification of rules and ‘no 
j enforcement’ action letters. We suggest that the RBI should consider I 
| inclusion of these tools to make the sandbox truly useful. 
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, Other Suggestions: 
j 7. Need to appoint a mentor 

I Even as the draft guidelines cover most of the aspects of the 

regulatory sandbox, we are of the view that ideally a mentor should 

be allocated to every selected start-up by the RBI. The move will 

| enable these companies to better understand the regulatory I 

| framework and also get hand holding during the different stages of 
j testing. 

| 8. Sandbox approval process 

I The regulations should provide for a sandbox approval process which 
J is transparent and has industry participation. We suggest: 
i Application submission (format of to be published by the RBI) 

| Evaluation of th e application (a panel should be formed comprising I 
| of RBI and industry representatives. The role of the industry 
| representatives should be to provide inputs on the nature of 
innovation and the potential benefits to the consumers.) 

in. Publication of approved innovations along with reasons based on 
which the said innovations were selected. 

iv. Publication of rejected innovations along with reasons based on 
which the said innovations were rejected. 

| v. Publication of progress reports and results of the innovation testing 
| snd lessons learnt. 

| 9. Need for public consultation 

j In order to ensure transparency in the regulatory development 
process through the sandbox, we suggest that RBI should conduct 
regular public consultations. This norm is adopted in most of the 
I countries and it would serve as an important component in terms of 
| regulatory development process adopted by the regulatory sandbox. 

| For example, in Australia, the Payment Systems (Regulation) Act 
| 1998 requires the Payments System Board (PSB) 5 to conduct public 
I consultations in matters where it proposes the imposition or variation 
___| of an access regime or standard. In particular, the PSB is required to 
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publish a notice summarising the purpose and possible effects of its 

actions, invite people to make submissions within a specified time 
and consider any submissions that are received. Moreover, the PSB 
is also bound by general notification obligations, which require it to 
publish notice, and ensure that participants in the payment system 
are informed of actions involving the imposition or variation of an 
access regime or standard. 

10. Set global standards 

We propose that the regulatory sandbox should be envisaged as a 
platform which is utilized by innovators across the world. This would 
not only help India in adopting new technologies but also equip India 
to set global standards and best practices in the FinTech sector. UK’s 
FCA has adopted a similar model and is promoting global regulatory 
sandbox aimed at solving common cross-border regulatory problems, 
through tests. 

11. Virtual sandboxes 

We completely agree with the idea of promoting limited-scale testing 
of new products in the sandbox, however, there are situations when 
a test environment does not exist or is barrier in terms of entry into 
the sandbox. In such cases, there should be a provision for 

participant firms to test their solutions virtually without entering the 
real market. 

Greetings from Entity 25 
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Entity 25 welcomes the opportunity to submit its comments and 
feedback on the Draft Enabling Framework for a Regulatory Sandbox 
as released by the RBI on April 18th, 2019. RBI has been in forefront 
of developing a robust fintech framework for the country. Regulatory 
Sandbox is one such decision which will enhance the ecosystem. 

In case there any queries or need any further information, your good 
office may get in touch with me or my colleague. 


138 







Entity No 


Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 


s. 

No. 

Entity 25 Comments, Queries 

Section 

1 

Need more details on some financial inclusion 

Point 6.1.1 


products to be supported. 

and 6.1.2, 

2 

What is the exact scope for the digital 

payments? What are the specific standards 
and test plans? Need to specify those 

Point 3.3 

3 

Is any RuPay or NPCI products (EMV) are part 

of RS scope? 

Point 3.3 

4 

Is RBI looking for any specification or 

standards writing with respect to these drafts 
for the ecosystem? 


5 

Who is going to develop this RS for Industry? 

Is RBI going to open RFP for this RS draft 
implementation? 


6 

Can we have different timelines and duration 

for each FinTech innovation company based 
on their innovation category mentioned in RS 

draft? 

rpoint 7.2 

7 

Post sandbox testing, does the participating 
entity get the accreditation by RBI to market 
the products and service for wider 
deployment? 

Point 7.2 

8 

Draft describes innovative products and 

existing technology gap and proposed solution 

to be stated and the same in section 9 states 

the RBI right to publish relevant information 
about RS entity, this may lead to patent, 
intellectual issues of any sort of clue on the 

problem addressed and solution to 

competitors? 

Point 4.4 
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^ it Entity is not qualified"forRS or nonS^V r Poln , 6 . 5 , ? 

8 * Part ° f RS testln 9' does entity still and Point 9 
qualified legally to run business with new 

products and sendee with proven concept 

internally and field test as current practice 
without RS? 


11 


If Entity is not duiiifiifffoFRS^Tl^ 

a part of RS testing, does entity still 
qualified legally to run business with new 
products and service with proven concept 

internally and field test as current practice 
without RS? 

W* nas specified mandatory regulatory I Point 6T 
requirements such as "Security of 
Transactions" "Secure storage of and access 
to payment data of stakeholders" How are 
these requirements assessed, are there any 
specific standards for conformity and who will 
assess these requirements? 


Many 

different standards. The objective of the RS is 
to not only raise the standards on security and 
data privacy, but also to allow scalable rollout 
o new FinTech solutions. How does the RBI 
plan to get the Industry to agree to on critical 
I elements such as common data models, APIs, 

I Al and relevant architecture? 
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Sub : Enabling Framework for Regulatory Sandbox 

Ref: RBI - Press Release dated April 18, 2019 
We take this opportunity to thank RBI for coming out with this path 
breaking initiative which we are sure would go a long way in 
supporting innovative products and processes in the financial 
services segment of the country. 

Having gone through the draft framework, we wish to seek your 
guidance on the following points before the final Framework is 
released: 

1. As per Sec 5, FinTech firms which meet the eligibility conditions 
prescribed for start-ups by the government which limits the turnover 
(less that Rs. 25 crore), vintage (less than 7 years), constitution 
(private limited, partnership or LLP) to be eligible to take part in RS. 
In this connection, kindly clarify whether the market players like banks 
and NBFCs operating in the FinTech area that are capable of coming 
up with products that could fit the Regulatory Sandbox (RS) would be 
eligible for participating in RS. 

2. As per Sec 6.5.1 (a), the entity should be a company incorporated 
and registered in India and shall meet the criteria of a start-up as per 
Govt, of India, DIPP Notification No. G.S.R. 364(E) dated April 11, 
2018. We request you to kindly clarify the applicability as this as this 
notification that was modified vide Gazette notification No G.S.R 34 ( 
E) dated Jan 16, 2019 was suppressed by Gazette notification G.S.R 
127 ( E) dated Feb 19, 2019. 


27 


Congratulations on moving ahead and releasing the draft for setting 

up the Regulatory Sandbox. | 


Please see below our quick thoughts and questions on the draft 
released by you 

What kind of data protection would be provided by you to keep our 
Intellectual Property Rights secured? We would be interested to know 
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how would our idea be protected from other peers in the sandbox and 
in the market. 

• Would we get a trademark for the product/ idea tested by us in the 
sandbox? 

• Can we simultaneously sell the product being tested in the sandbox, 
considering the timeline of the sandbox is 26 weeks? 

• We understand that you would provide the appropriate regulatory 
support by relaxing specific regulatory requirements. Would you give 
more details about the legal support that we can expect at your end? 

• Would you provide us a physical infrastructure or an IT infrastructure 
to carry out the test? Could you give more details around the kind of 
technology support that we can expect from you. 

• Is the application to this sandbox cyclical? i.e. in First round you take 
10 firms and after certain time you take another 10 firms etc.? 

• Is there any liability issues in case of failed testing? How are we 
protected? 

• Are there are any costs associated with the sandbox or for 
accessing data within Sandbox? 

Thank you and look forward to working with you. 


Entity 28 thanks the Reserve Bank of India (RBI) for the opportunity” 

to comment on the Draft ‘Enabling Framework for Regulatory 
Sandbox”. We note that the RBI recognises the importance of public- 
private dialogue to co-create policies for a better digital future for all. 
The Entity 28 commends the RBI for suggesting a comprehensive 
framework for a regulatory sandbox to support India’s rapidly evolving 
fintech space. Regulatory sandboxes have been accelerating 
innovation throughout Asia Pacific, and have allowed many more 
non-traditional financial services industry (FSI) players to develop the 
variety of financial services provided to citizens. 
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We would suggest that the RBI possibly look at Fast-Track approvals, 
similar to what Singapore has created as part of its Sandbox Express, 
to boost innovation in the fintech sector. 

I would be happy to speak further with the RBI on the draft enabling 
framework or host a vendor-neutral discussion between the RBI and 
other members of the industry from the Entity 28 to provide feedback. 


29 


Our comment/Suggestion on RS 

6.5 Under Fit and Proper Criteria for Selection of Participants in RS. 
One of the eligibility (Criteria) is that “The entity shall have a minimum 
net worth of Rs.50 lakh as per its latest audited balance sheet” which 
may not be practical for innovative-thinking companies. If the Net 
Worth would not be rationalized, it may encourage back- the entry of 
a firm which has money power but lacks innovation. 

The points “Areas that can potentially get thrust from the RS include 
microfinance, innovative small savings, and micro-insurance 
products, remittances, mobile banking, and other digital payments” 
may control the scope of the broader, relevant and low-cost that 
emerging technology, or use of existing technology in an innovative 
way. Instead, it would encourage all good if their emerging technology 
leads to cost and time saving and be compliant. 

Our experience: One of large bank's IT-based incubation department 
has assigned to find emerging technology from outside the bank 
which may help existing bank (any) process to save cost and time, 
has found our is eligible, but struggle to arrange a meeting with a 
respective department with us for two quarters. 
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We appreciate and welcome the initiative of -f 

for 

thank RBI again for the opportunity to respond If RB, 

^SSmSSSSS ^ :: "• « 

Sa R „p S r Bank ° f lndia ' S Draft “ Enab,in9 F ~k 'or 

Entity 31 would like to thank the Reserve Bank of India f-RBn , 

= «sdraftBna b „n 9Fram ework fo rRegu,a, o :tr: 

Dra« Framework") and providing an opportunity for the Indus,r!o 
Provide comments. We fully agree with the RBI s policy 1 

grl? " 3 dVnamiC and Si9nifcant source Of future 

. 3nd )0bS f ° r lndia ’ and Entit y 31 is proud to be a member of 
this emerging ecosystem. ^- 
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Based on our experience in this area, including on similar initiatives 
in other jurisdictions, we set out below some comments for RBI to 
consider when finalising the Draft Framework. 

Please note we would kindly request that the contents of this 
response remain confidential although we would be happy to be listed 
as a respondent. 

1) The Draft Framework is a result of the working group on FinTech 
and Digital Banking that included representatives from the Securities 
and Exchange Board of India (“SEBI”), the Insurance Regulatory and 
Development Authority (“IRDA”) and the Pension Fund Regulatory 
and Development Authority (“PFRDA”). However, it is not clear what 
role these additional regulators will play in developing the sandbox 
going forward. Most importantly, it would be useful to clarify that while 
an application to be in a sandbox cohort is submitted to RBI, the terms 
and conditions applicable to any regulatory relaxation will include 
references to any applicable SEBI, IRDA and PFRDA regulatory 
requirements such that the sandbox can be relied upon on a cross- 
sectoral basis. 

2) Section 5 of the Draft Framework refers to the regulatory sandbox 
as being targeted at FinTech firms which meet eligibility conditions 
prescribed for start-ups by the government. However if promotion of 
innovation is the primary objective of the Draft Framework, then the 
sandbox should be available for testing all eligible technologies that 
meet the test in section 6.5.3. This should include established 
inancial services providers who may need the sandbox for product- 
:esting. In practice, collaboration between incumbents and start-ups 
is key for innovation, and the sandbox should facilitate this by being 
available to entities which are not start-ups. 
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^ NO j^ C °'“'^c k received from stake h.ders^ 
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andaleT^tTrth 0 ' enab '' n9 proposed innovation, and sections 6,2 
ou urther details on relaxation of regulatory requirements 

However, secfion 4.3 states tba, the RB, or the regl 0ry sand x 

ZT 7 de ' e9al WaiV6rS - We "° p ' d recommend a Cea “ 

(including ZeT '7' ^ ‘ re ' aXed re9Ulat0ry repuireme nts 

ng legal basis upon which this is being given) in order to 

ZZZT ,0 “ ^ - « relaxation 

nstitute a no-act,on letter and is RBI authorised to provide this 
under appt,cable laws? The same question can be aske in re £ 

, o any SEBI, ,R DA or pfroa requirements being reiaxed 

1 to b, e ocZlr 9eS ? a ' diSWbU,ed led96r teChn0, ° 9y (in add » p " 

lockchain), quantum computing and cloud be included as 

inovative technologies in section 6, 2 . while such technologies 

first instance appear to be "back-end" from a consumer 
perspective, innovation in these ar p ac „ consumer 

consumers. eXpedite in "~ ati °" *» 

5, We appreciate RBI's position in focusing on the * Qf inn 

,c o, g,e S set out in section 6,.2 while avoiding technologies 
| which could arguably have no tangible benefit , 0 consumers 
owever, we would encourage RBI to ensure some flexibility to 
, vemde section 6.3 where some of the technologies can be shU 

have use-cases which benefit consumers. For instance crypto 
assets may constitute usefu , techno|ogy ^ * 

d 9 ital identities which may be helpfu, in solving inefficiencies In KYC 
and anfi-fraud processes (we appreciate this use-case may be 
captured through the genera, inclusion of distributed ledger 

! 7 ° 9y h0WeVer ’ S0 Understand RBI's distinction here) 

6) Section 6.6 of the Draft Framework could also state tha, in some 
instances customers may need to be returned to their pre-teZf 
pre-sandbox state ,n orderto ensure an orderly exit from the sandbox 
his would make consumer protection more robust. 
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7) While we generally agree with the focus on transparency set out in 
section 6.8, we also suggest that applicants be able to request 
confidentiality of certain information where this can be justified on 
commercial grounds and where consumers would not be misled as 
to the operation of the sandbox or the entities participating therein. 

8) In addition to a domestic sandbox, we encourage RBI to consider 
the potential benefits of the Global Financial Innovation Network (the 
GFIN ) which was launched in January 2019. The GFIN is not 
intended to replace any domestic sandbox that member countries 
may have in place, but does promote cross border solutions for 
scaling innovative products and services 


Following the release of the Draft Enabling Framework for the 
Regulatory Sandbox on 18 April 2019, I am writing to submit 
comments on the Draft Framework on behalf of Entity 32. 

The attached document provides our detailed response to this 
consultation, organised into five broad submissions supported by 
relevant research and reasoning. These are aimed at strengthening 
the proposals set out in the Draft Framework. 

1. Clearer regulatory objectives must support the vision and design 
of the Regulatory Sandbox. 

2. Restrictive eligibility criteria and entry conditions can risk defeating 
the objectives of the Regulatory Sandbox. 

3. The design of the Regulatory Sandbox must consider the extent of 
the RBI’s jurisdiction and cross-sectoral effects. 

4. The design and processes of the Regulatory Sandbox must embed 
mechanisms to enhance transparency in decision-making. 

5. The consumer protection elements of the Regulatory Sandbox 

must be stronger to ensure that the costs of innovation are not 
externalised on Indian consumers. 
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We hope our submission will be useful for your deliberations. We win 
appy to extend research support on any of these and allied 

31 maV an$e " * he Pr ° CeSS ° f f " lalisln9 a framework for 

regulatory sandbox. 

Comments to the Reserve Bank of India (RBI) on the Draft Enabling 

;~ ,orRe 9 ui - s —-^'-(. dJ 


n this Response, we present our comments on the RBI’s Draft 
ramework for the setting up of a Regulatory Sandbox (RS) i„ 
ponse to the call for comments from stakeholders (RBI 2019) Our 

r - *" 

n.™ “““ “ *“ » - ™ 

This Response seeks to provide constructive comments on the Draft 
Framework. We hope they will be considered and addressed in future 

Z72 I ^ ^ Fram6W0rk ' re ' ated -r notifications 

regarding the proposed RS. 


148 








Enti,y N ° Publi^ CorrTments/ Feedback receded frWstal<e holders on 
Draft Fram ework for Regulatory Sandbox 

1 C| earer regulatory objectives must support the vision and design of 
the RS The Draft Framework in section 2.2 (Objectives) envisions 
■ that the RS will be “a formal regulatory programme for market 
j participants to test new products, services or business models with 
| customers in a live environment, subject to certain safeguards and 
| oversight” (RBI, 2019). The RS will seek to support the innovative use 
| of technology to address existing problems and benefit consumers 
(page 3, RBI, 2019). This is laudable as a broad vision for the RS. I 
However, the current Draft Framework stops short of setting out a 
clear, specific objectives that will guide the RS and hold it 
accountable. We submit that in order to achieve this vision, the RS 
must be supported by clearly articulated regulatory objectives and i 
sub-objectives which should then be incorporated into its design and 
functions. There is growing consensus that a lack of clarity on 
regulatory objectives adversely affects the performance of a regulator I 
I (Roy, Shah, Srikrishna, & Sundaresan, 2019). Most international I 
| models of RS identify a similar broad vision for the RS, but 
I substantiate this with clearer objectives and sub-objectives. The 
| Report of the RBI Committee of Household Finance (RBI, 2017) for 
instance when recommending an RS framework, identified the broad 
objective “enabling fintech innovation leading to the accelerated 
I development of financial products and services customised to the 
I unique needs of Indian households”. The Committee then 
| emphasised the two elements which it expected the RS to champion | 

I *' e ' ^ ena ^' n 9 fintech innovation and (ii) development of customised I 
financial products. 

Similarly, the US Consumer Financial Protection Bureau’s (CFPB) I 
Project Catalyst, the earliest version of a regulatory sandbox 
operating today, adopts a similar approach (Wechsler, Perlman, & | 
j Gurung, The State of regulatory Sandboxes in Developing Countries, I 
j 2018). All of the CFPB’s operations including the regulatory sandbox 
_ j are informed by the objective in its governing statute (Dodd Frank 
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Wall Street Reform and Consumer Protection Act 2010) ie "to 
ensure that the markets for consumer financial products and services 
operate efficiently and transparently to facilitate access and 
innovation. In the case of the sandbox, the CFPB used this statutory 
directive to arnve at the narrower objective of encouraging consumer 

friendly innovation which it further qualifies through a six-point (non- 
exhaustive) list 

(Consumer Financial Protection Bureau (CFPB), 2016): 

EXPand aCC6SS 0f financlal P^ts to the underserved population 
" improve consumer's control over their economic decisions and help 

consumers adopt savings and spending habits in line with their long- 
term aspirations; 

redUCe prices for ooosumers through increased competition or 
adoption of technology that reduces operating costs 

IV. increase features and functionality so tha, consumers can benefit 

from products that (a) work better (b) easier (c) quicker (d) or are 
more widely available; 

v. enhance safety and security of products including by incorporating 

better defences against data breaches, mechanisms to avoid or 

reduce errors and efficient correction of errors that may occur, and 

promoting transparency and consumer understanding of the 
products. 

Achieving a similar clarity on the objectives for the proposed RS will 
create a better benchmark to which the design, functions and 
cisions of the RS can be aligned. These objectives should 
transcend the objective of merely enabling private businesses to test 
the viability of their offerings. A narrow objective like that is perhaps 
best left to the markets or for private incubators. The RS framework 
Should concern itself with the impact that an offering can have on the 
financial ecosystem, especially quality of consumer outcomes 

consumer protection and expanding users' access to safe financial 
products. 
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The text or me Draft Framework already indicates certain underlying" 
regulatory objectives that could be made explicit In future guidelines. 
These are highlighted below. 

'• T ° ldentify and miti 9 ate new risks: Section 3.1 (Benefits) of the Draft 
Framework identifies the potential of the RS regime to identify new 
and attendant risks of emerging technology to arrive at the 
appropriate regulatory stance. This should be a foundational 
regulatory objective of the RS regime, as it is the key reasons for the 
development of this regulatory technique. By clearly delineating the 
risks associated with the deployment of new technology, the RS has 
the potential to educate the regulator on the attendant risks and 

provide the empirical information needed to design a proportionate 
regulatory regime. 

ii. To expand access and delivery of relevant; low-cost financial 
products: Section 2.1 (Regulatory Sandbox) of the Draft Framework 
emphasises on the ability of the RS to develop “innovation-enabling 
or innovation-responsive regulations that facilitate delivery of 
relevant, low-cost financial products”. This objective is integral to 
objectives of the RS given the need for widening and deepening 
access to suitable finance in India. 

hi. Support consumer choice and welfare: The RS should articulate 
a clear objective to indicate the types of solutions that it will support. 

A readily available objective in this respect is found in section 6.5.2 
(Fit and Proper Criteria for Selection of Participants in RS) which 
states that: “ the proposed FinTech solution should highlight an 
existing gap in the financial ecosystem and the proposal should 
demonstrate how it would address the problem, or bring benefits to 
consumers or the industry or perform the same work more efficiently. 
Elevating this to a regulatory objective will provide a timeless principle 
will guide the types of technology that should be tested in the RS. In 
the absence of such a clear principles, the RS might take an ad-hoc 
approach that could create uncertainty and arbitrariness 
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I ^ °^ ered b y entities not allowed into the sandbox. Sandboxes 
I around the world tend to allow a wide variety of entities to access 
their programme, and it is unclear why India should take a different 
approach (UNSGA Fintech Working Group and CCAF, 2019). 

2.1 The eligibility criteria must be aligned to the regulatory 
objectives of the RS 

| The eligibility criteria for the RS limit its target audience of applicants 
| to a small sub-set of fintech entities without a clearly discernible 
I rationale. Below we highlight specific concerns that arise as a result, 
which could hamper the effectiveness of the RS. 

i. Only technology start-ups can be RS applicants: The Draft j 
Framework requires that prospective RS applicants must be start-ups 
| as defined by existing Indian notifications2 

(i.e. operating for less than 7 years with an annual turnover of less 
than 25 crore). The rationale for this restriction is unclear. Several 
| innovative financial technologies that would benefit from the live- 
| testing approach may be offered by other types of entities, including | 

| existing banks and financial institutions. If the objective of the RS is I 
| to support innovative uses of technology in financial services, then 
j this criteria could defeat this objective by restricting the RBI from 
engaging with other non-startup entities in the financial sector that 
are developing and deploying these technologies, 
i. RS applicants are required to have a minimum net-worth of INR 50 
Lakhs: The Draft Framework contains a blanket minimum net-worth 
of INR 50 lakhs for prospective applicants. While the rationale for this 
requirement might be to act as a risk buffer, this is not explicitly stated. 
Blanket, rigid criteria are generally not desirable in such situations. 
The principle of proportionality suggests that the intensity of any 
regulatory obligation be consistent with the risk that it potentially 
poses (Government of India, 2013). Moreover, a blanket threshold 
when pegged too high can have unintentionally excluding smaller, 
newer technology providers working on innovative services relevant 
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p° the K* oojectives from the RS. Thrift Frami^FkWiiF^F 
| the rationale for this net-worth requirement, and create proportionate 
| formulation (that matches the risk posed and size of an RS applicant) 

| to create a level playing field for all entities. 

in. No principled basis for the inclusion and exclusion of technologies 
from the RS. Section 6.1 (Sandbox Cohorts and Product/Services/ 
Technology) presents two indicative lists of products/services and of 
technologies that will be allowed to be tested through the RS. 

| Separately - section 6.3 (Exclusion from Sandbox Testing) provides 
| an ‘indicative negative list” of products/services/technologies that will 
| be excluded from the RS. No clear principle appears the guide the 
| inclusion or exclusion of technologies or services from these lists, 
j Such an approach is unusual in RS regimes and could be 
| counterproductive for the RBI. Most jurisdictions evolve criteria for 
| determining when an innovation can enter the RS, based on whether 
| the proposed innovation uses a new technology or uses existing 
j technology effectively to deliver a financial service (Wechsler, 

| Perlman, & Gurung, 2018). A list of approved or restricted innovations 
is not generally prescribed, and could potentially limit the regulator’s 
policy objective of identifying and mitigating risks from different I 
technologies. A list-based approach could also enable ad-hoc I 
amendment and regulatory uncertainty, 

in the absence of a rationale and guiding principles. For instance, two 
| items excluded from the sandbox through the indicative negative 
| list-credit registry and credit information-are areas in which 
| financial technology is creating significant innovations to overcome 
| traditional barriers to better, and more suitable access to finance for I 
| Indian consumers and firms. 

j The eligibility criteria and entry conditions for the RS merit re- 
consideration. Focussing solely on technology start-ups could create 
some inconsistencies, since even those technology startups who 
I could _P ot entially qualify within the criteria of the Draft Framework 
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p eed n ot be directly regulated by the RB^but may offer'their services" 
under private contract to RBI regulated financial institutions). The 

| design of the RS must take account of the RBI's jurisdiction and 
| cross-sectoral effects. 

| The Draft Framework proceeds on the basis that the RBI will establish 
the RS, and notes that the RBI can provide the regulatory support “by 
| relaxing specific regulatory requirements (which the sandbox entity 
I will otherwise be subject to)...” (page 10 of the Draft Framework). I 
| However some dissonances arise, especially on the issue of the I 
RBI’s regulatory authority with respect to tech-based entities. 

3.1 The RBI’s authority with respect to non-financial sector entities is 
| uncertain 

| The design and eligibility criteria in the Draft Framework make it clear 
| that the main participants of the proposed RS are intended to be 
technology start-ups. Many technology start-ups offering the 
innovative products, services or creating the technology included in I 
the indicative lists (in section 6.1 of the Draft Framework) will not be 
directly regulated by the RBI or directly offer financial services. They 
| may instead offer their technology services to RBI-regulated financial 
| institutions under contract. Such technology service providers are 
I currently outside the realm of RBI oversight, regulation and 
j enforcement.4 Their incentive to enter the RS is unclear, as the RBI I 
will not have any ability to offer relaxations or clarity on regulation 
| since these entities often operate outside financial sector regulations. 

| The Draft Framework must to clarify whether the RS will only be open 
| to technology start-ups which will offer financial services themselves j 
| OR will partner with a financial sector institution regulated by the RBI j 
j (to whom the RBI could provide relaxations, and over whom it has I 
jurisdiction). Alternatively, the Draft Framework should clarify the 
I framework and levers that will be used by the RBI to engage with non-1 
financial sector entities. 
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W^h^i"in relation to thelurisdiction“tf the regulator andtoT 
entities allowed to participate in their sandbox. 

The PFRDA’s Exposure Draft Report on the potential regulatory 
sandbox to catalyse the growth of the National Pension System 
recognises the inter-regulatory issues involved given the nature of 
technology (PFRDA, 2019). It notes that many FinTech applications 
span across the domains of multiple regulators, and specifically 
states that the PFRDA sandbox will only be open to those entities 
already falling within the remit of PFRDA and also that the PFRDA 
would not be involved in facilitating approvals from other regulators 
(see page 41, PFRDA, 2019). Other detailed recommendations on 
the function and design of the sandbox are also included. 

The report of the IRDA's Committee on Regulatory Sandbox in 
insurance sector in India takes a slightly different approach (IRDAI 
2019). It recommends that registered insurers and insurance 
intermediaries be eligible for the sandbox, and Fintechs seeking to 
enter the sandbox show a minimum net worth of Rs 25 lakhs in the 
previous year or partner with an existing insurer or insurance 
intermediary to make a joint business proposal (see page 29, IRDAI 
2019). It also notes that while it will accept entities that may be under 
other regulators’ purview into the sandbox, it will play no role in 
facilitating approvals. The report further includes detailed 
recommendations on the function and design of the IRDA's proposed 
sandbox. Reports also indicate that SEBI is mulling the potential for 
its own regulatory sandbox (Economic Times, 2019). 

The RBI’s Draft Framework appears to be taking a different stance 
with regard to its ambit and jurisdiction compared to the PFRDA and 
IRDA. This create inconsistencies since the relevant technologies are 
likely to be deployed across the financial sector. More widely, given 
the detailed recommendations that are evolving from other financial 
sector regulators, there is potential for duplication, overlaps or 
contrad i ctions across different regulatory sandboxes. This 
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p dvertlsln 9 or e-commerce) which prevent it from offering financial 
| services. The RBI could learn from similar lessons in other countries. 

I i. The RS could be administered or take input from a cross functional 
| group to help spot and manage some of these regulatory 
j inconsistencies. For example, Malaysian Central Bank, Bank Negara 
j Malaysia (BNM) set up a Financial Technology Enabler Group I 
(FTEG) as a cross-functional group across the BNM to develop policy 
that support innovations, and create and manage the Malaysian 
Sandbox (Wechsler, Perlman, & Gurung, The State of regulatory 
I Sandboxes in Developing Countries, 2018). 

14 IS not uncommon to see cross-sectoral regulatory sandboxes, 
though their success is often contingent on effective communication 
and coordination between respective and relevant financial sector 
regulators, such as in Belgium (European Parliament, 2018). In 
Mauritius, entities can apply for “Regulatory Sandbox Licenses” 
available for innovations generally (rather than only in the financial 
| sector) and aimed at targeting gaps where the law is inadequate or 
I non -existent. The entity operating the sandbox (the Economic 
I Development Board in Mauritius) makes decisions on applicants with 
the input of the relevant regulators who will be part of the Technical 
Committee for applicants (Wechsler, Perlman, & Gurung, The State 
of regulatory Sandboxes in Developing Countries, 2018). 

The Draft Framework is silent regarding the potential for any cross- 
I sectoral coordination, but including some institutional mechanism to 
support the consistent development of regulation could help the RBI 
learn from the lessons emerging in other jurisdictions with sandboxes. 

; 4 The design and processes of the RS must embed mechanisms to 
, enhance transparency in decision-making. The legitimacy and 
I effectiveness of an innovative new regulatory project like the RS will 
| depend on its transparency. The RS evaluation process is inherently 
I dlscretionar y. and could risk becoming arbitrary or ad-hoc in the 
| absence of transpare nt, principles-based framework accompanied by 
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Entity NoTp^jblirCor^ents/ Fe^dbaclTFe^eived 
| Draft Framework for Regulatory Sandbox 

r Pr °P ortionalit y- Any regulatory obligation placed on an entity should 
| be proportionate to the nature, scale and complexity of the risks in 
| the regulated activity being carried out. 

«. institutional neutrality: The regulator should work to minimise the 
- inconsistencies in the regulatory approach towards regulated 
activities that are similar in nature or pose 
| similar risks to the fulfilment of regulatory objectives. I 

iii. Enabling competition: The RS should actively endeavour to not 
create avoidable barriers for applicants to avail of its services. It 
I should strategically engage with a wide applicant 
| base and ensure it actively promotes competition where it can and 
| that its actions do not adversely affect the competitiveness of the 
| financial ecosystem. By committing to these principles upfront, the ' 

I RS will gain the confidence of the applicants, increase their I 
| willingness to experiment and build confidence in the wider market, 
j 4.2 RS is not a substitute for public consultation and other tools 
| necessary for sound regulatory practice. It is a grave concern that the 
Draft Framework states that using an RS will reduce the need for 
| stakeholder consultations (see section 3.4 (Benefits), page 3 of the 
| Draft Framework). This should not be the case, as there is no | 
substitute for coherent consultation to create appropriate and realistic 
regulation. The RS regime should be used as a tool to foster open I 
and structured communication with stakeholders and complement 
broader consultation processes rather than supplant them, as the I 
I regulator stands much to learn from these dialogues. In fact, global 
experience shows that a structured route for dialogue is both a I 
precondition and a regulatory objective of successful RS regimes. 
Formal, transparent, and open dialogue between a regulator and 
innovators, where each side learns from the other, is perhaps a key 
| element of regulatory sandboxes and a means for advancing to a I 
| regulatory mindset that responds to and reflects the FinTech | 

| revolution underway (Jen ik & Lauer, 2017). As the RBI contemplates I 
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fthe RS, it muii ensuie that it consciously assesses thiteSim^flhiri 

innovative method in conjunction with other regulatory tools (rather 
I than to their exclusion). 

4.3 The institutional design, structure and resourcing of the Fintech 
Unit will determine the effectiveness of the RS. The success and 
| credibility of the RS will also be determined in large parts by its 
institutional design. Global experience on sandboxes show that while 
J they offer benefits, they are complex to set up and costly to run and 
most regulatory questions raised in connection with sandbox tests 
j can be effectively resolved and potentially more affordably achieved 

j through innovation offices and other tools (UNSGA Fintech Working 
| Group and CCAF, 2019). 

I It is crucial that the proposed FinTech Unit has the requisite human 
j resource capability required to process the applications, engage in 

I ' teratlVe test ' desi 9 ns an d constantly evaluate the performance of the 
j applicant as laid out in Section 7 of the Draft Framework. This will 
require well-staffed, dedicated teams to ensure that the RS has the 
J capacity to meet its objectives in a consultative and accountable j 
manner. It must also be designed in a way that it exposes its 
| decisions to internal supervision and scrutiny, complemented by 
| regular internal and external reporting. Literature on institutional 
design suggests that the organisational structure is a crucial 
determinant of regulator’s performance (Chugh et al, 2 018). Some 
| pathways to strengthen regulatory accountability include 
| incorporating supervisory mechanisms which comply with the rule of 
law and incorporating strong reporting mechanisms (Government of 
India, 2013). It must be reiterated that sandboxes are one of many 
approaches to enable the development of an optimal regulatory 
stance in a country like India that the RBI should carefully choose 
between, given the capacity constraints in which we operate. The 
consumer protection elements of the RS must be stronger to ensure 
-_ th3t ^ costs of innovation are not externalised on Indian consumers. 
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|The DrafTFrameworiTem^entities^musfensure - ^ 

| any obligations towards customers under experimentation are fulfilled 
or addressed before exiting or discontinuing the 
RS. Section 6.9 (Consumer Protection) emphasises the need to notify 
test customers of potential risks, available compensation and to 
obtain their explicit consent regarding the testing. The Draft 
Framework repeatedly emphasises that upfront liability for consumer 
will lie with the RS participant, and that its entry into RS does not in 
any way limit an entity’s liability towards its customers. Unfortunately, 
despite these high level statement, it is unclear how this liability 
framework will be embedded in the RS and enforced, in the event of 
| consumer losses due to RS live-testing. 

i. Limitations of notice and consent: Globally, regulators have relied 
j on notification and obtain express consent of the consumers 
I regarding their involvement with RS testing. 

| However, the poor effectiveness of consent when it comes to actually 
improving consumers understanding or protecting them has been 
well-acknowledged globally (Solove, 2012). Disclosures and notices 
are therefore poor tools for true consumer protection, and cannot be j 
heavily relied upon as the primary safeguard for Indian consumers 
| who are part of live testing under the RS. 

ii. The need for redress for consumers being live tested: Currently, I 
j the Draft Framework is silent on the redress mechanisms which are I 
j available to the consumer. It is not clear if the Banking Ombudsman 

| services and other institutional mechanisms for raising grievances 
j and seeking redress will be accessible to consumers who engage ! 
with products being tested in the RS. Some jurisdictions restrict the I 
access of consumers taking part in RS live testing to mainstream I 
grievance redress mechanisms. For instance, in Singapore, 

| consumers of sandbox services are not allowed to reach out to the 
| financial dispute resolution body (Monetary Authority of Singapore, ' 
_j-2016). Given the higher stakes, where consumers who are part of I 
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M 'I Sii7S ®f f ° 1 ^ cenlly raSai ^draWRBTSl^^ 

framework for Regulatory Sandbox. 9 

Enabl 34 p' $ attaChi " 9 US feedbaCk ° n th * Feedback on the Draft 
Enabhng Framework for Regulatory Sandbox for your reference 

e ' ' n Apnl 2018 relaasad the 'Draft Enabling Framework for 

r kT < ' Draf ‘ FrameWOrk ’ ) ' aaald "9 comments from 
stakeholders by 8 May 2019. Below are high level comments, as well 
as specific suggestions. 

The present Draft Framework appears to foreground application-level 

innovation more than innovation on the core frnancial product/ 

ervice. In order to service every segment of India and push forward 

o nancal inclusion, the financial sector needs new types of basic 

Products across insurance, credit, mutual funds, and banking The 

purpose of a regulatory sandbox should be to foster innovation across 

eve s o the financial ecosystem, including the underlying core 

financial product/ service, licensing architecture and as well as the 

customer facing distribution channel. This is the mindset through 

which the sandbox should be architected, and should also guide the 

decision making when it comes to approving applications to run in the 
sandbox. 

In addition to this overarching point, below are specific comments on 
the text of the Draft Framework. 

1. Legal waiver 

The primary purpose of a regulatory sandbox (RS) is to provide an 
environment where participants have certainty that certain specific 
existing regulatory requirements have been relaxed, and that no legal 
consequences wil, follow from no. obseming these specific regulatory 
requirements. The statement In para 4.3 of the Draft Framework that 
The RBI or its RS cannot provide any legal waivers' conflicts with this 
primary purpose. It's also worth noting that para 4.3 also conflicts with 
the portion of para 6.2 which states The RBI may consider relaxing 
.^warranted, some of the regulatory requirements for sandbox 
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5rE " i5 " n " S5; ^^ 

one which needs to be addressed - how to ensure that basic 
regulations are followed when products/ services are tested in the 

Suggestion: Replace paragraph 6.2 with a statement reflecting the 

fact that any regulatory requirement which has NOT been explicitly 

relaxed as part of the application approval process, is assumed to 

app y in full. This would ensure that applicants adhere to all general 

egal and regulatory requirements (including KYC, data protection, 

in ormation secunty, etc.) while also not hindering innovation in these 
fields. 

5. Limited to startups 

The Draft Framework limits participation in the RS to 'startups' as 
defined ,n DIPP Notification No. G.S.R. 364(E) dated April 11 , 2018 
By definition this excludes any company that has revenues of over 
Rs. 25 crore or is more than 7 years old. Established medium to large 
companies are also important sources of innovation - given this 
reality, ,t would be overly restrictive to prevent their participation, and 
lead to sub-optimal outcomes. 

Suggestion: Remove the condition in para 6.5.1(a) requiring the 
applicant to be a ‘startup’. 

6. Readiness for market deployment 

Para 6.5.1(f) imposes a requirement that ' applicants should 
demonstrate that their products/semces are technologically ready for 
deployment m the broader market'. Given that applicants to the RS 
Will be testing and experimenting new products/ services, it may not 
always be possible to meet this requirement a. the application stage 
This could be a significant barrier to entry, particularly for startups. 
Suggestion: Remove the requirement in para 6 . 5 . 1 (f). 


168 



Entity No 


35 


Draft Framework for Regulatory Sandbox 

>iease find attache* for your kind consideration, coSSiSTtottS" 

Draft Enabling Framework for Regulatory Sandbox on behalf of 
Entity 35. 

We would be happy to provide any clarifications that you may require 
to our comments. 


1 IS. j Para 1 Subject Issue 

1 No ‘ 

Change 

Proposed 

M 4.2 Case-by- The Draft Enabling 

The Draft 

case i Framework for 

Framework 

bespoke Regulatory 

should provide 

| 11 | authorizatio Sandbox (“Draft 

for the guiding 

ns and 1 Framework") 

principles for 

| 1 regulatory identifies the risk 

decision making 

I relaxations but does not se 

and robust 

can involve out parameters for 

mechanism for 

time and defining the 

addressing any 

1 discretional t principles that may 

difficulties that 

judgements be used in 

may arise 

(this risk decision making. 

from/in relation 

may be Further, no 

to bespoke 

addressed mechanism for 

authorizations 

by handling addressing the 

and regulatory 

applications difficulties arising 

relaxations. 

in a out of this 


transparent provision has been 


manner and contemplated. 


following 


well-defined 


principles in 


decision¬ 


making)” 
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ana 

that are currently i proposal for 

registered in 

in the grey area of entry instead of 

India and 

existing legislation, making the RS 

shall meet 

Moreover, these applicable only 

the criteria 

established , to start-ups. 

of a start-up 

businesses may ' 

as per Govt. 

also come up with 

of India, 

innovative 

DIPP 

products and 

Notification 

services which 

No. G.S.R. 

otherwise meet all 

364(E) 

eligibility criteria 

dated April 

and provide the 

11, 2018.” 

same benefits as i 


those listed in para ^ 


of the Draft 
Framework. Due 
:o their existing 
infrastructure, 
such businesses 
may also be better 
equipped to 
achieve the 

objectives financial 
inclusion and 
reach by riding on 
such existing 
infrastructure. 

Further, it may not 
be possible to have 
absolutely objective 
entry criteria for 
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determining 
eligibility to 

participate in an RS. 
While some basic 
criteria |, ke 

registered entity, 
rninimum net worth, 
etc. may be 
prescribed, criteria 
relating to the 
technological means 
or the objective can 
never be exhaustive 
e -9- would 

incremental 
advances qualify as 
“innovative 
technology", even if 
neither the proposed 
means nor the 
objective are 

innovative. 


holders on 


4|.6.35.3 


Exclusion 

from 

Sandbox 

Testing 


The negative list is 
a potentia 

roadblock as it wil 
exclude 
innovations which, 
though related to 
the 

products/services/t 

echnology 
excluded from the 
RS, otherwise 


The Draft 

Framework 
should not 
exclude any 
product/service/t 
echnology from 
sandbox testing. 
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highlight existing 

gaps in the 
financial 
ecosystem and 
demonstrate the 
potential to bridge 
such gaps or bring 
benefits to the 
consumers. For 
example, adoption 
of distributed 
ledger technology 
for the excluded 
products/services/t 
echnology. 


6-5.1 I ‘The entity I a minimum net 

(b) j shall have a , worth of Rs.50 
minimum lakh as per its 
net worth of latest audited 
Rs.50 lakh | balance sheet.” 
as per its I This requirement 

latest | would exclude a lot 

audited | of start-ups which 

balance j come up with 

sheet.” | innovative 

products/services 

satisfying all 

eligibility criteria 
and providing the 
same benefits as 


The Dral 

Framework 
should revoke 
this criterion. 
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stake holders 


those listed in para 
3 of the Draft 
Framework but 
which otherwise 
have negative net- 
worth in the initial 
years of operation 
|~The Draft 

conduct of j Framework lays 

the bank I down certain 

accounts of criteria which are 

the entity as i vague and 

well its subjective. The 
promoters/di issue with 

rectors | mandatorily 

should be imposing such 
satisfactory. | criteria is an entity 
which has an 
A innovative 

satisfactory i product/service 
CIBIL or | but doesn’t meet 
equivalent | the minimum net 
credit score | worth criteria 
°f the I would be deemed 
promoter(s)/ disqualified 
director(s)/ automatically, 

entity is I Further, tl 
required.” | requirement f 

“satisfactory” 
conduct and 


CIBIL/equivalent 


The RBI may 
consider 
segregating 
criteria into 

mandatory and 
optional 
categories. 
Objective 
requirements 
relating to 

system security, 
data protection, 
for example, can 
be made 

mandatory 
criteria, while 
discretionary 
criteria can 
remain optional 
only. 

products/service 
s should be 
done only after 
the participant 
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^Entity NcT 


Draft Framework for Regulatory Sandbox 


usage ana penetration in recent years. The RS effort is an imported 
next step in India’s overall efforts to move to a less-cash society and 
economy We encourage RBI to consider best practices for regulatory 
sandboxes that have been implemented in other jurisdictions around 
the world as it considers how to shape India's RS. We also encourage 
RBI to couple the RS with a no-action letter policy so that larger 
P^ejsnanreceiveregulatory certainty through that process as well. 
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we welcome this 

opportunity by RBI to provide our inputs and suggestion in response 

to the draft RS framework and the note is enclosed for your kind 
consideration. 

We look forward to an opportunity to discuss this further detail and 
we would delighted to provide additional information. 

Regulatory Sandbox Proposal 

Private sector innovation can lead to better outcomes for financial 
customers, but this innovation must be within regulatory bounds. 
Sometimes, these regulatory boundaries inhibit new products and 
ideas from being delivered to customers. A regulatory sandbox 
provides the private sector with an opportunity to introduce new and 

innovative products while enabling governments to maintain existing 
regulations, 

learn about new offerings, protect against risk, and test new 
regulatory concepts. 

i RBI’s RS proposal seeks to achieve these important goals. 

An area like authentication could be an interesting area for innovation 
through a regulatory sandbox. 

Currently regulatory guidelines limit the type of unique factors that 
can be utilized for two-factor authentication. A sandbox would enable 
new factors, and combinations of factors, to be utilized in pilot testing. 
Data can be gathered, and if it is demonstrated that fraud rates are 
reduced, then perhaps there might be room to encourage regulatory 

reform. Notably, RBI’s proposal highlights digital identification and 
Digital KYC as key areas of focus. 

The UK and US states like Arizona are successfully operating 
regulatory sandboxes that could be looked to as models for India. 
These models treat larger established firms and smaller fintech 
^startups that apply exactly the same. These models also make no 
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pi stinctlon between foreign and domestic applicants. The models” 
neither specify the exact innovations that are being targeted nor 
specific exclusionary offerings; as regulators want to allow for 
innovative proposals to be made and judged on a case-by-case 
basis. Implementing some of these best practices could help India's 
| regulatory sandbox to become a more appealing opportunity for 
| innovators across the financial services landscape. 

I Governments around the world are now beginning to explore global 

regulatory sandboxes that would enable innovation to scale across 
I borders rapidly. 

| ii These global solutions are particularly interesting as they would 
| resolve some of the fragmentation issues that plague fintech 
| innovation, particularly for the underserved. 

mi RBI should strongly consider some of the best practices currently 
[ being implemented in other regulatory sandboxes around the world 
I in order to ensure that India’s RS is interoperable with others. This 
| would open up the possibility that firms in India’s RS could scale their 
! products to other countries around the world. 

I No Action Letter 

The no-action letter is a natural complement to the regulatory 
sandbox. The sandbox allows a firm to be free from regulation in a 
specific area to test a product. The no-action letter describes a very 
specific product offering and why the firm thinks that this new product 
offering does not inhibit any existing regulations and should be “pre- 
approved” by the regulator before being offered to the market. The 
regulator reviews a no-action letter and can conclude that no 
j enforcement action will be taken against the new product offering. 
The firm can then proceed to innovate without fear of unlawfulness. 

The Securities and Exchange Commission in the United States 
operates a very well-crafted no-action letter system. The no-action 
letter will only apply to the specific firm that applied for relief, but in 
| certain cases that relief can also be expanded to third parties with 
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| scalable. The SEC also compiles and publishes no-action letters so 
I that firms in the ecosystem can be aware of the regulatory 
interpretations that guided the SEC's decisions. This transparency is 
imperative to the success of the SEC’s no-action letter policy. No- 
action letters foster a communicative relationship and trust between 
| regulator and regulated entities. They should be strongly considered I 
| as part of RBI's efforts to foster innovation in the regulation of I 
| financial services in India. With this overarching ideas described 
above, specific comments and suggestions in response to draft RS 
guidelines are provided below 

1. Allowing RS to all Indian companies 

The Draft Framework limits participation in the RS to ‘start-ups’ as I 
defined in DIPP Notification No. G.S.R. 364(E) dated April 11, 2018. I 
By definition this excludes any company that has revenues of over 
Rs. 25 crore or is more than 7 years old. 

To meet the aspiration goals of financial inclusion and financial health 
for all India in short time, there is need work on mission mode and 
democratise innovation. In addition just start-ups, established 
medium to large companies can also contribute to the innovation. 
Currently, the draft is overly restrictive and could lead to sub-optimal 
| outcomes. 

I Suggestion: Remove the condition in para 6.5.1(a) requiring the I 
| applicant to be a ‘startup’ and expand the scope to all companies I 
| registered and operating under the Indian companies act. 

| 2. Relaxing regulatory requirements 

| Paragraph 6.2 lists certain regulatory requirements that have to be 
I observed by applicants. This list includes data protection regulations, 

| KYC requirements, and ‘statutory restrictions’. One of the key 
j objectives of RS is to able have temporary suspension of existing 
regulations and innovate with objectives to better ways conducting 
j KYC, obta ining user consent etc. The underlying issue, however, is 


179 




\ 


*\ 



180 










38 


Entity No” j Public Comments/ Feedback received from stake holders on 
Draft Framework for Regulatory Sandbox 

Tt was great to see the work from RBI towards setting up a regulator^ 
sandbox. 

6.5 Fit and Proper Criteria for Selection of Participants in RS 

b. The entity shall have a minimum net worth of Rs.50 lakh as per its 
latest audited balance sheet" 

Suggestion: I personally believe that small businesses fintech or 
otherwise are a path towards making great progress and innovation 

without the burden of multiple share/stakeholders private or 
otherwise. 

In line with this thinking I suggest the requirement "The entity shall 
have a minimum net worth of Rs.50 lakh as per its latest audited 
balance sheet" to be changed to "The entity shall have a minimum 
net worth of Rs 50 lakh as per its latest audited balance sheet while 
onboarding users outside of a private control group belonging to the 
participant's organization". 

The mere acceptance into RBI's sandbox would enable companies 
to raise the relevant funds. This would encourage a substantial 
amount of first time entrepreneurs to build innovative fintech products 
while still maintaining capital stability. 

39 I As you are aware, Entity 39 


Entity 39 welcomes the opportunity to submit its comments and 
recommendations on the Draft Enabling Framework for a Regulatory 
Sandbox as released by the RBI on April 18th, 2019. The RBI has 
consistently been on the forefront of creating a safe, secure and 
robust environment for Fintech to strive and grow. The call to set up 
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_ aft Framework for Regulatory Sandbox 

direction. 

The comments below are a collation of the comments and 
recommendations made by our members companies in the Fin.ech 
sector. We appreciate your consideration of these important issues 
and look forward to continuing to support the RBI's vision in creating 
a robust fintech sector in the coming years 


Entity 39 Comments on Draft Enabling Framework for 
Regulatory Sandbox 

Entity 39 welcomes the opportunity to comment on the Draft 
"^hg^ame work for Regulatory Sandbox (the framework). ■ 


I We support the facilitation of fintech 
innovation through an effective regulatory sandbox approach tha, 
a ows for experimentation while limiting hsks to consumers and the 
financial ecosystem. In order to be counted as a success, and on par 
With established regulatory sandboxes elsewhere in the world the 
proposed safe harbor must equally benefit innovators, regulators 
and consumers. The regulatory benefits should be voluntary, and be 

ept as accessible as possible in order to avoid market distortion and 
other access-based inequities 
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"" I regulatory sandbox allows an entity to operate in a controlled 

environment, it is crucial that they are granted relaxations and 
waivers from certain legal regulations so they can test their products 
| and services without fear of legal repercussions. 

| Such regulatory relaxations and waivers are the premise of regulatory 
| sandboxes worldwide. While some regulators grant blanket waivers, 

| others permit specific relaxations with regard to identified legal 
j regulations or through waivers or no-action letters on a case-by-case j 
I basis ' We recoiT| mend inclusion of suitable legal waivers for the 
| participating entities in the regulatory sandbox environment. This 
allows sandbox participants to successfully test their products free 
from potentially debilitating or unnecessary regulatory requirements, 
thus achieving the conceptual objective of the regulatory sandbox. 

, To create a successful sandbox environment, it is important for 
regulators to tailor the sandbox experience in a way that makes sense 
for each firm’s business model. The sandbox facilitators’ role is not to 
create a one-size-fits-all approach, but to support firms and enable 
I safe experimentation while still protecting consumers. Successful 
| sandboxes, like the one implemented by the United Kingdom 
Financial Conduct Authority’s (UK FCA), have not provided 
| participants with wholesale exemption from regulation, but rather 
| created a set of regulatory requirements suitable to each participant, 
j This judicious, firm-specific approach ensures that the sandbox is a 
safe space for consumers as well as participants. 

5. The use of “fintech” to describe target applicants may not 
sufficiently capture the universe of new applications and services that 
| may in the future have a nexus to the financial ecosystem or 
I consumer use of monetary instruments. 

j In addition to the above criteria set out in the Draft Proposal, the RBI 
| may consider determining eligibility basis the entity’s capability in 
demonstrating (i) a clear and identifiable action plan to operate within 
1 the sandbox and its exit strategy upon achieving its 
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R^Wei/success; and (ii) basic internal controls (such as standards 
of data security, consumer protection, quality control in accordance 
| with international standards, etc.) established within the entity to 
I mitigate legal/regulatory risks. 

6.1. Ws recommend a sandbox duration to be at least one-year with 

the ability to apply for extensions. We note that Sec. 7.2 lays out a 

lengthy process which may not be achievable in a six-month window. 

Sec. 7.2.4 allowing for just 12 weeks of testing may also not be 
I adequate. 

6.1.2. We note that there is a mix of processes and technology in this 
list. We question whether data analytics and some Al and machine I 

, learning applications, which can be used to better analyze the 
| effectiveness of current products and can be applied external to the | 

customer interface, requires the need for regulation or incremental | 

| permissions. 

| We also recommend the inclusion of data storage I 
| solutions/encryption/security solutions, in light of data being the 
primary currency driving financial technology services. 

6.2. We encourage regulators to ensure applicants safeguard 
commercial IP and license requirements during the sandbox period. 

An objective criterion for a sandbox applicant should be put in place 

| t0 demonstra te meeting this requirement. For instance, an entity I 
| maintain at least an international security standard for data I 
: storage/management such as the ISO/IEC 27001- Information I 

■ Security Management. Alternatively, a sandbox applicant may 

■ demonstrate meeting encryption standards such as (i) AES (128 bits 
and higher); (ii) TDES (minimum double-length keys); (Hi) RSA (1024 

I b ' tS ° r higher); ( iv ) ECC 060 bits or higher); or (v) EIGamal (1024 bits 
| or higher). 

| 6.3. A regulatory sandbox should ideally adopt a blue-sky approach I 
j that helps generate ideas for products and services in the fintech 
j space without limitations on the type of product. To create more I 
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participation to any legally sound product, service, or technology that 

can address an existing gap or provide further innovation in the 
financial ecosystem. 

For example, the exclusion of credit information as a qualified subject 

matter precludes innovation around leveraging alternative data, such 

as utility/telecom payments as credit information, which may be an 

adequate means for discerning creditworthiness in some cases. 

Given that credit remains under-penetrated in the Indian economy, 

this exclusion may foreclose innovation where it is needed the most. 

The proposal to exclude cryptocurrency applications will limit 

experimentation and the development of smart contracts and testing 

Of other approved blockchain uses. We recommend the framework 

allow for some testing of cryptocurrencies and related distributed 

ledger technologies, including blockchain, even if the test parameters 

are tightly defined and mutually agreed by the parties in advance of 
testing. 

6.5.1 The draft framework requires entrants to be companies 
incorporated and registered in India. Recognizing that financial 
innovations can emerge from any source, regardless of its legal 
structure or its place of incorporation, we strongly believe sandbox 
requirements must be the same for domestic and foreign participants 
alike, whether or not they are incorporated in India. Restricting 
participation to local providers will restrain competition and limit the 

scope of innovative solutions that can benefit from the sandbox and 
in turn benefit India, 

Like-wise, we also object to participation being limited to start-ups, as 
defined by the Department for Promotion of Industry and Internal 
Trade (DPIIT) guidelines. By permitting only a narrow category of 
firms to participate, India risks missing out on critically innovative 
products and services that could be developed by larger players in 
Ma^fintech space. To foster innovation and promote strategic 
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P artner ships, we recommend allowing participation from traditional 
I players such as banks, payment networks, and financial institutions, 

I as well as non-traditional players like Fintechs. A good example of 
this concept in action is the UK FCA sandbox, which is offered to both 
j incumbents and starts-ups, whether operating independently or in 
j partnership, to help trial innovative products that may not be able to 
reach the market without the benefit of a sandbox environment. Hong 
| Kong, Malaysia, Abu Dhabi, Singapore, Australia, Thailand, and 
Bahrain have also allowed traditional players to participate in their 
respective regulatory sandboxes, alongside Fintechs. 

Finally, the regulators may wish to consider requiring that that the 
I promoter(s)/director(s) of the applicant do not have any direct or 
| indirect links with companies currently in NCLT or a court of law. This 
screening would ensure that adequate care is taken to mitigate the I 
risk of a conflict of interest. 

6.5.6 and 6.5.7. Exit and transition strategies require flexibility. By 
| virtue of its nature, a regulatory sandbox is supposed to provide a test I 
| bed for ideas and allow for iterative development. Thus, thinking one * 
j will have a tested proof of concept and a clear exit strategy seems to | 
j be making too many suppositions and may restrict the very process I 
I of innovation. 

| 7. We recommend a flexible approach to developing the timelines of! 
the various stages of the sandbox process. Many new companies 
underestimate the time and resources required for testing new 
| products. Maintaining close communication as the guidelines suggest 
while allowing for some flexibility in timelines will ensure that firms 
| have the support they need for success. 

8.2. A transition period may be needed from the conclusion of the 
I sandbox to market entry. The regulator should be prepared to provide 
| continued support as sandbox entities exit the sandbox environment 
I and navigate successful market entry and sustainability under the 
I supervision of appropriate regulation. The UK FCA, for example, has I 
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40 


sandbox (o help oomp ly with existing regulations while also 

wor mg with regulators and standards setting bodies to adapt to 
these new entrants. M 

9 The terms of the disclosure provisions should be agreed at the 

rrr Peri0d - “■*«" - ** secrets, patents and 
any other property rtgh. must be protected in the sandbox process 

Test results obtained by the government, Including product 

performance, customer usage metrics and other sensitive data will 
also require adequate protections. 

In Closing, we appreciate the positive step forward in proposing 
gu, *es for a regulatory sandbox framewor. We encourage the 

India t 01 ‘ y W " h °‘ her re9U ' a,0ry and 9° ve rtiment bodies in 
nd <«> coord,nate efforts regarding the promotion of bntech through 
eg latory sandboxes. other ^ ^ ^ ^ 

<pe regulators with separate sandbox initiatives limits their 

H zrr For exampie ' in Hon9 K ° n9 ,he sandb °x« o' ^ 

HKMA, the Securities and Futures Commission (SFC, and the 
Insurance Authohty (IA, are linked up so that there is a single point 
n ry for pilot Inals of cross-sector tinted, products. This allows for 
nnovanve products tha, cross those regulatory boundaries to be 
te led as wel, as reducing the effort a start-up wil, need to take to 

determine which sandbox would b e most appropriate. 

Entity 40. 


Rrs. of all, many thanks for releasing a very comprehensive drat, on 
the regulatory sandbox! 
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As a 


_I. we are closely watching 

RBI Working Group initiatives around FinTech and Digital banking. 

We have gone through the regulatory sandbox draft in detail and are 

| excited about the recent developments and potential participation in 
| future as it shapes up. 

We had some feedback/questions as we went through the document 
in detail: 

Stakeholders coming together: One of the most important 
success criteria for a sandbox to work well is when all key 
stakeholders : Banks, FinTechs, End-Consumers come together on 
the sandbox so that relevant use cases and ideas can be tried well. 
Example - How banks will open up relevant APIs as part of the 
regulatory sandbox, How consumers can be part of it so that they can 
participate in voluntary pilots and provide feedback on solutions. 
Would be great if the on boarding of these stakeholders as well as 
working mechanisms can be detailed out. 

Regulatory Sandbox versus other Sandboxes: For last few 
years, we have be en closely w atching PSD2 and Open Banking 
initiatives in Europef 

One thing that stands out in Europe is that 
each Bank came up with their own sandboxes. As account 
aggregator standards are adopted in India, we might see a similar 
pattern. It would be good to understand how the regulatory sandbox 
and potentially separate Bank and NBFC sandboxes co-exist and will 
relate to each other. 

Open Innovation and Real Data: It is not clear whether the data 
pipes and availability of relevant data for use cases to be tried are 
going to be real/live versus dummy data. Its also important for all 
innovators to have easy access to sandbox - while we see that 
FinTechs will go through a thorough vetting process to be part of 
sandbox, In our experience for open innovation to really thrive - all 
kind of innovators, e.g. Students, Engineers and FinTech enthusiasts 
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should have access to the sandbox. To ensure security and to 
prevent misuse, various access roles could be created as well. 

IP Protection and Confidentiality: As FinTechs try various use 
cases within the regulatory sandbox, there will be multiple instances 
when IP and information will be shared in detail with RBI as well as 
relevant stakeholders. Would there be any mechanisms in place to 
protect IP? 

Assessment of Startup's technology and other Fit & proper 
criteria: Section 6.5.1 (f,h,i) briefly mentions some of the criterion to 
vet the technology and policies of a startup. Would be great to know 
if there are any specific guidelines and standards that would be 
followed by RBI to evaluate these or is it entirely at the discretion of 
assessing officials and team. 

Actual timelines: We understand that the regulatory sandbox 
draft will go through revisions at this stage, however it would be great 

to understand tentative dates when the applications for startups will 
open in recent future 

We thank you again for this large initiative, we are excited about 
addressing large use cases in the FinTech ecosystem with disruptive 
innovations in our country. 


Please let us know if we can be of any help in contributing 
towards the regulatory sandbox as it shapes up! 
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41 

Below are my comments - 

1. Point 4.2 & Point 4.4 

"Case-by-case bespoke authorizations and regulatory relaxations 
can involve time and discretional judgements (this risk may be 1 
addressed by handling applications in a transparent manner and 1 
following well-defined principles in decision-making)." 

Post-sandbox testing, a successful experimenter may still require 
regulatory approvals before the product/services/technology can be 
permitted for wider application." 

Comment: It is vital for the regulator to provide time commitments on 
regulatory relaxations for a successful implementation of a regulatory 
sandbox. Having this open ended lowers the confidence and 
increases uncertainty for the companies who wish to participate 

2. Point 4.5 

These, however, may not have much legal ground if the RS 
framework and processes are transparent and have clear entry and 
exit criteria. Upfront clarity that liability for customer or business risks 

shall devolve on the entity entering the RS will be important in this 1 
context." 

Comment. The program should delve into how the legal system will 
consider the regulatory sandbox application when evaluating the 
cases. As part of the sandbox program it will greatly help to have a 1 
iaison and process established for participants who may have been 
served with legal notices 

3. Point 6.2 

"Regulatory Sandbox: Eligibility Criteria for Participating in the 
Sandbox" 

Comment: There should be guidelines on participants using(rather 
not using) selection for sandbox for commercial advertising. 

4. Point 6.5.1 g. Applicants should demonstrate that their 
Droducts/services are technologically ready for deployment in the 
broader market. 
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The RS is, at its core, a formal i 

regulatory programme for 
market participants to test new 
products, services or business 
models with customers in a live | 
environment, subject to certain 
safeguards and oversight. The 
proposed financial service to be 
launched under the RS should 
include new or emerging 
technology, or use of existing 
technology in an innovative way 
and should address a problem, 
or bring benefits to consumers. 


Regulatory Sandbox: Eligibility We request RBI to clarify on 

Criteria for Participating in the the process to be followed 

| Sandbox for customers participation 

| T . . . ,. in Regulatory Sandbox 

l he target applicants for entry to . 

| initiative 

the RS are FinTech firms which 
meet the eligibility conditions 
prescribed for start-ups by the 
government. 

The focus of the RS will be to I 
| encourage innovations where: 

i. there is absence of I 

governing regulations; 
i. there is a need to I 

temporarily ease I 
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regulations for enabling i 
the proposed innovation; 
the proposed innovation 
shows promise of 
easing/effecting delivery 
of financial services in a 
significant way. 


in. 


Sandbox Cohorts and 
Product/Services/Technology. 

The RS may run a few cohorts 
(end-to-end sandbox process), 
with a limited number of entities 
in each cohort testing their 
products during a stipulated 
period. The RS shall be based 
on thematic cohorts focussing 
on financial inclusion, payments 
and lending, digital KYC, etc. 
The cohorts may run for varying 
time periods but should 
ordinarily be completed within 
six months. 


We suggest that the 
framework to also mention | 
process to be followed 
ab °ut seeking 

enhancements in case of 
extensions beyond six 
months. 


6.2 Regulatory 
Relaxations 
Applicant 


Requirements/ 
for Sandbox 


The RBI may consider relaxing, 
if warranted, some of the 
regulatory requirements for 


Considering that Digital 
KYC is one of the 
Innovative Products/ 
Services’ mentioned under 
paragraph No. 6.1.1, we 
suggest that relaxation in 
the regulatory requirements 
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pandbox applicants for thelrelated to KYC/AML/ cfTI 
duration of the RS on a case-to- for cases considered in 
case basis. However, regulatory Regulatory Sandbox, to I 
requirements that shall encourage innovation in 
mandatory have to be | Digital KYC space, 
maintained by the applicants are | 

| as follows: 

Customer privacy and 
data protection 
Secure storage of and| 
access to payment data 
of stakeholders 
Security of transactions 
KYC/AML/CFT 
requirements 
Statutory restrictions 


6.4 I Number of FinTech Entities to 
be Part of a Cohort 

The focus of the RS should be 
narrow in terms of areas of 
innovation, and limited in terms 
of intake. The RS shall begin the 
testing process with 10-12 
selected entities through a 
comprehensive selection 
process as detailed in the 
framework under 'Fit and Proper 
criteria for selection of 
participants in RS’. 


Considering the list of 
Innovative 

Products/Services offered, 
we suggest that more 
number of entities maybe 
allowed to perform testing 
under each cohort. 
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(following conditions: 

a. The entity should be a 
company incorporated 
and registered in India 
and shall meet the criteria 
of a start-up as per Govt 
of India, DIPP Notification 
No. G.S.R. 364(E) dated 
April 11, 2018. 

b. The entity shall have a 
minimum net worth o 
Rs.50 lakh as per its 
latest audited balance 
sheet. 

c. The promoter(s)/ 

director(s) of the entity 
are fit and proper as per 
the criteria enumerated 
in Annex I. A declaration 
and undertaking shall be 
obtained to this effect as 
per Annex II. 

d. The conduct of the bank 
accounts of the entity as 
well its promoters/ 
directors should be 
satisfactory. 

e A satisfactory CIBIL or 
equivalent credit score of 


We suggest that the 
selection criteria specified in 
the draft framework may be 
relaxed for allowing more 
participants in the 
Regulatory Sandbox and 
should not be so stringen: 
that it acts as a dampener 
for the spirit of innovation. 

We also recommend that 
the criteria specified may be 
enlarged to include banks, 
companies promoted by 
arge entities in order to 
implement solutions which 
could impact the financia 
ecosystem in a positive 
manner. Also, banks along 
with startup should be 
Dermitted to participate in 
he RS, wherein both banks 
and startup can leverage on 
each other in order to bring 
innovative financial 
products. 
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the promoter(s)/ 

director(s)/ entity 
required. 

f. Applicants should 

demonstrate that their 
products/services are 
technologically ready for 
deployment in the 
broader market. 

The entity must 
demonstrate 

arrangements to ensure 
compliance with the 
existing regulations/laws 
on consumer data 
protection and privacy, 
h. There should be 
adequate safeguards 
built in its IT systems to 
ensure that it is protected 
against unauthorized 
access, alteration 
destruction, disclosure or 
dissemination of records 
and data. 

The entity should have 
robust IT infrastructure 
and managerial 

resources. The IT 
systems used for end-to- 
end sandbox processing 
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will be checked by the 
RBI to ensure end-to-end 
integrity of information 
processing by the entities 
concerned. 


17 The Sandbox Process and its 
Stages in a Regulatory Sandbox 

7.1 End-to-End Sandbox 
Process 

A detailed end-to-end sandbox 
process, including the testing of 
the products/innovations by 
FinTech entities, shall be 
overseen by the FinTech Unit 
(FTU) at the RBI. 

17.2 The Sandbox Process! 
Stages and Timelines 
Each cohort of the RS shall have 
the following five stages and 
timeline: 

7.2.1 Preliminary Screening (4 

weeks) 

The FTU shall ensure that the 
applicant clearly understands 


We request RBI to clarify in | 
which stage participant as a 
part of identified cohort can | 
start setup activities in this! 
environment. 

We also recommend a 
shorter time line for each) 
activity to increase time to) 
market, 
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the objective and principles o 

the sandbox and conforms to it. 
This phase shall last for 4 weeks 
from the launch of the sandbox, 
where the applications shall be 
received by the FTU and 
evaluated to shortlist applicants 
meeting the eligibility criteria. 

7.2.2 Test Design (3 weeks) 

This phase may last for 3 weeks. 
The FTU shall finalize the test 
design through an iterative 
engagement with the applicants 

and identify outcome metrics for 
evaluating evidence of benefits 

and risks. 

7.2.3 Application Assessment (3 
weeks) 

This phase may last for 3 weeks. 
The FTU shall vet the test 
design and propose regulatory 
modifications, if any. 

7.2.4 Testing (12 weeks) 

"his phase may last for a 
maximum of 12 weeks. The FTU 
shall generate empirical 

evidence to assess the tests by 
close monitoring. 
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7 2.5 Evaluation (4 weeks) 

This phase may last for 4 weeks. 
The final outcome of the testing 

of Products/services/technology 

as per the expected parameters 
including viability/acceptability 
under the RS shall be confirmed I 
by the RBI. The FTU shall) 
assess the outcome reports on I 
the test and decide on whether 
the product/service is viable and 
acceptable under the RS. 


9 Disclosure 


We would like to submit that 

The RBI shall reserve the right ^ C ° U,d 66 detrimental for 
to publish any relevant ^ ent ' tieS th ° Se are trying 
information about the rs t0 establish a Particular 
applicants on its website, bUS ' ness model as 

including for the purpose of PL,bllshing of sensitive 

knowledge transfer and bUSIness model related 

collaboration with other d8tailS may 9 ' Ve undue 

international regulatory adVantage to Potential 

agencies. competitors. Further, we are 

of the view that the leakage 
of intellectual property into 
the public domain is an 
important risk, for entities 
entering the Regulatory 
Sandbox. Hence, 

appropriate safeguards may 
be deployed. 
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43 

Entity 43 appreciates the opportunity to provide feedback on the draft 

“Enabling Framework for Regulatory Sandbox”. Entity 43 supports 
the facilitation of fintech innovation through an effective regulatory 

sandbox approach that allows for experimentation while limiting risks 
to consumers and the financial ecosystem. The RBI’s efforts 
represent an important step in spurring next-generation fintech 
innovation in India. In this context, please find attached our feedback 
and suggestions on the draft framework. However, the scope of the 
proposed sandbox is unduly narrow and have the opportunity for 
further changes and simplification. In this regard, please find our 

feedback and suggestions. 

Sandboxes achieve their full potential when all market participants 

are allowed to participate. 

1. A regulatory sandbox provides a "safe" environment to test 
products and services while facilitating speed to market and best- 

in-class product development. This allows innovators of all types 
and sizes, including new players as well as incumbents, to 
improve their understanding of the regulations governing them 
so they can shape their products for maximum consumer benefit. 
The draft framework adopts a highly restrictive approach to 
determining which entities can participate in the regulatory 
sandbox. Eligibility is limited to startups, as defined by the 

Department of Industrial Policy and Promotion (DIPP) guidelines. 
By permitting only a narrow category of firms to participate, India 
risks missing out on critically innovative products and services that 
could be developed by larger players in India's fintech space. To 

foster innovation and promote strategic partnerships, Entity 43 

recommends the RBI widen the ambit of its sandbox to allow 

participation from traditional players like banks, payment 

networks, and financial institutions, as well as non-traditional 

players like fintechs. A good example of this concept in action is the 
United Kingdom Financial Conduct Authority's ("UK FCA") 
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sandbox, which is offered to both incumbents and starts-ups, 
whether operating independently or in partnership, to help trial 
innovative products that may not be able to reach the market without 
the benefit of a sandbox environment. Hong Kong, Malaysia, Abu 
Dhabi, Singapore, Australia, Thailand, and Bahrain have also allowed 
traditional players to participate in their respective regulatory 

sandboxes, alongside fintechs. 

2. The RBI's draft framework includes a list of products, services, and 
technologies that it will not accept for testing. A regulatory sandbox 
should ideally adopt a blue-sky approach that helps generate ideas 
for products and services in the fintech space without limitations on 
the type of product. To create more innovative and cost-effective 
solutions, Entity 43 recommends opening participation to any legally 
sound product, service, or technology that can address an existing 
gap in the financial ecosystem. 

To that end, it is also important for regulators to tailor the sandbox 
experience in a way that makes sense for each firm's business model. 
The sandbox facilitators' role is not to create a one-size-fits-all 
approach, but to support firms and enable safe experimentation 
while still protecting consumers. Successful sandboxes, like the one 
implemented by the UK FCA, have not provided participants with 
wholesale exemption from regulation, but rather created a set of 
regulatory requirements suitable to each participant. This judicious, 
firm-specific approach ensured that the sandbox was a safe space 
for consumers as well as participants. 

3. The RBI draft requires entrants to be companies incorporated 
and registered in India. 

Recognizing that financial innovations can emerge from any 
source, regardless of its legal structure or its place of incorporation, 
we strongly believe sandbox requirements must be the same for 
domestic and foreign participants alike, whether or not they are 
incorporated in India. Restricting participation to local providers 
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will restrain competition and limit the scope of innovative solutions 

that can benefit from the sandbox, and in turn benefit India. 

4. In order to experience true innovation in the open market 

and help further India's transformation into a "smart nation," it is 

important to prepare participating fintechs for long- term success 
beyond the sandbox. Exit and transition strategies should be clearly 
defined and practicable. The RBI draft provides sandbox entities the 
option to apply for an extension of the sandbox period as long as 
the application is submitted at least one month in advance and with 
valid reasons for extension. Entity 43 commends this spirit of 
flexibility and encourages the RBI to provide continued support as 
sandbox entities exit the sandbox environment and navigate 
successful market entry and sustainability under the supervision of 
appropriate regulation. The UK FCA, for example, has continued to 

work with a number of firms that have transitioned out the sandbox 

to help comply with existing regulations while also working with 
regulators and standards setting bodies to adapt to these new 
entrants. Successful sandbox facilitators may also prepare 
participating firms for long-term success by working with 
regulators and standards-setting bodies to adapt to these new 

market entrants. 

5. Lastly, the draft framework highlights the regulator's inability to 
provide any legal waivers to participating entities and expressly 
disclaims any liability arising from participation in the sandbox 
experiment. There is no clarity on the reasons for not offering legal 
waivers. Since a regulatory sandbox allows an entity to operate in 
a controlled environment, it is crucial that they are granted 
relaxations and waivers from certain legal regulations so they can 
test their products and services without fear of legal repercussions. 
Such regulatory relaxations and waivers are the premise of 
regulatory sandboxes worldwide. While some regulators grant 
blanket waivers, others permit specific relaxations with regard to 
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Identified legal regulations or through waivers or no-action letters 
on a case-by-case basis. Entity 43 recommends inclusion of 
suitable legal waivers for the participating entities in the 
regulatory sandbox environment. This allows sandbox participants 
to successfully test their products free from potentially debilitating 
or unnecessary regulatory requirements, thus achieving the 
conceptual objective of the regulatory sandbox. 

The RBI’s proposal for regulatory sandbox is a welcome approach to 
advancing innovation in India and will be strengthened by taking into 
account the aforementioned inputs. 

On behalf of Entity 43, we thank you for the opportunity to comment 
on this i mportant matter and welcome continued conversation. 


44 


It was a delight to see the much awaited draft on sandbox. 



Here are some feedback points which we wanted to convey 



1. Minimum Net Worth requirements: A lot of startups would be 
excluded due to this. 50 Lakh min requirement would be deterrent for 
new ideas and new startup products which might actually require 
sandbox efforts for validation and those will die before reaching a net 
worth of 50L. 

2. A requirement of CIBIL should also be taken away since in lot of 
cases the entrepreneurs may not have even borrowed any money 
and their credit score may not be there. When we started Entity 44 it 
was precisely due to my rejection of a credit card application probably 
due to no credit score despite a high paying job. 

3. In case of any failed efforts during sandbox, there should be a 
report/blog for the same to help understand the challenges for wider 
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benefit of ecosystem, an understanding may be reached with the 

startup in concerns 

4. It would help if number of cohorts in a year are more than 3-4 
(probably every quarter atleast) to help variety of ideas to be tested. 
Broadly it appears with support of RBI things would move fast and 
Indians would benefit from the experiments in sandbox. 

Apart from that a data sandbox or digital sandbox could also be 
envisioned for certain digital products in a limited setting 
As a young entrepreneur and from our team at Entity 44, we whole 
heartedly appreciate RBI's positive steps in this direction to help drive 
India forward digitally and financially. 

Always happy to be able to contribute. Do reach out for 
clarifications/feedback. 


45 


Entity 45 thanks the Reserve Bank of India (RBI) for the opportunity 

to provide comments on the Draft “Enabling Framework for 
Regulatory Sandbox”. We commend the RBI in taking steps to 
support India’s evolving financial technology market. 

Entity 45 applauds the RBI and the working committee on seeking 
the comments on “Enabling framework on regulatory sandbox” for its 
forward-thinking and timely suggestion to provide a sandbox 
environment for companies to experiment with fintech solutions in 
India. We believe that a well-thought through and successfully 
deployed Regulatory Sandbox will continue to strengthen and 
demonstrate India s reputation as a leader in the development of 
innovative financial solutions. 

Entity 45 is committed to the vision of proactive policies on 
innovation and financial inclusion. 
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We append our response in the annexure to this letter. We would be 
happy to meet with the Bank to discuss the Regulatory Sandbox 
Discussion Paper, and other matters pertaining to technology use 
and outsourcing further. Should you require any additional 
information with regard to the contents of this response or to discuss 
any aspect of the issues addressed in the Discussion Paper, please 
do not hesitate to contact me. 

The Financial Services (FS) landscape in India is fast evolving, with 
a proliferation of technological innovation and solutions. We 
appreciate the Reserve Bank of India’s initiative to capitalize on all 
the benefits of new technologies while balancing perceived risks, and 
developing programs to provide thoughtful regulatory flexibility. 

We understand that RBI’s fundamental reason for instituting a 
FinTech Sandbox is to advance the industry through innovations that 
improve business operations or provide better services to customers. 
FinTech Sandboxes address the concern that regulations may be a 
barrier to innovation in financial services, and enable regulators to be 

more responsive and to respond in a far nimbler fashion to technology 
disruption. 

From a participant’s perspective, the central reason to bring a project 
into a FinTech Sandbox is that in the participant’s view, the proposed 
project would either not fit within or be unduly restricted by current 
law or regulations; or both the regulator and the applicant may be 
unclear how the existing regulatory framework would or should apply 
to proposed solution. The FinTech Sandbox enables the participant 
and regulator together to develop insights into applicability or 
potential regulatory changes that may need to be made when taking 
the project into a live environment with regulated workloads. 

Entity 45 believes Regulatory 
Sandboxes should be intended to encourage experimentation using 
the most current and innovative technologies, including cloud 
computing. Such Sandboxes should also provide the opportunity for 
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fintechs and FSIs to demonstrate their assessment of the innovation 

with the regulator without any judgement or preconceptions, thereby 
encouraging openness and collaboration. We also look forward to 
guidance from the RBI, particularly for new entrants, perhaps not yet 
licensed, on how to develop and comply with legal and regulatory 
requirements in the FS sector. 

In this regard, Entity 45 submits the following comments in response 
to RBI’s Draft Enabling Framework for Regulatory Sandbox: 

1. Paragraph 4.1 - Risks and Limitations: We note that the Draft 
Proposal acknowledges that innovators lose flexibility and time while 
operating within the sandbox due to inter alia obtaining authorizations 
or addressing legal concerns pursuant to failed experiments, etc. In 
order to address these limitations .Entity 45 propose the following: 
Entity 45 recommends: 

(i) Incorporating a ‘Sandbox Express’ akin to the model proposed by 
the Monetary Authority of Singapore. This bespoke model may 
enable entities intending to engage in low-risk activities to embark on 
experiments more quickly, i.e., pursuant to a fast-track application 
process without the need for further approvals. The criteria to qualify 
within such pre-determined sandbox may include: (a) technological 
innovation of the financial service; (b) proprietary nature of the 
activity; (c) financial stability of the entity, etc. Upon meeting the 
stated criteria, a specified time period may be stipulated within which 
(a) the approval must be provided to initiate the activity; (b) the activity 
must be completed; and (c) progress reports/updates must be 
provided to the regulator on the activity undertaken. 

(ii) We note that a sandbox should provide a safe environment within 
which the entity can demonstrate innovation without any judgement 
or preconceptions, thereby encouraging openness and collaboration. 
However, in order to safeguard such entities, guidance may be issued 
to ensure that identified activities prone to legal risk are required to 
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meet identified legal and regulatory requirements within the sandbox 
to mitigate any legal liability. 

I 2. Paragraph 5: Eligibility Criteria: 

I Entity 45 recommends: In order to be eligible for the Sandbox, a 
| financial sector industry (FSI) and fintechs would need to: (1) define 
, clear objectives, parameters, success criteria, and exit strategy, (2) 

J define risks associated with the experiment - to the extent that they 
| are able, (3) outline the basic set of controls which need to be 
| maintained. In India, innovations in financial sector are primarily 
driven either by start-ups companies or the special innovation labs I 
j set up by the large FIs with strong technological acumen to fuel 
| innovation, development, deployment of new products, processes or 

j services driven by technology and inclusion to drive efficiencies in 
cost and time. 

| This includes data security, and consumer protection if consumer 
data is involved, a requirement to work with RBI for periodic 
| evaluation that allows for iterations of the experiment and; the FSI or 
fintech company can notify the regulator of its intent to experiment in 
j the Sandbox and, if there is no objection, the FSI or Fintech Company 
j proceeds. 

3. Paragraph 6.1.2: Innovation Technology: 

| Entity 45 recommends: The Draft Proposal may also seek to include 
data storage solutions/encryption/security solutions, in light of data 
j being the primary currency driving financial technology services. The 
key objective is to have a faster innovation cycle where infrastructure 
I can support technology from idea to incubation to prototype. In 
j addition to this, the regulator should encourage competitive I 
, approaches to solving the challenges or improving processes. 

4. Paragraph 6.4; Number of Fintech Entities to be part of a Cohort: 

j We note that the RBI seeks to restrict the initial intake to 10-12 I 
I entities. However, given there is scope for failure/discontinuance of 
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,es,in 9. in order to motivate greater innovation and participation we 
| propose the outcome based approach. 

Entity 45 recommends: 

I (i)Entity 45suggests that quantifying the fintech entities for Regulatory 
Sandbox will stifle the innovation (the core objective). Instead, RBI 
can consider to restrict the number of entities per FI to offer equal 
opportunity to all. In addition to this, RBI can also propose to have I 
clear guidelines in terms of selection criteria for entities having 
outcome based approach of financial inclusion, reduction in costs for 

end customers and significantly enhancing the end user experience 
amongst others. 

(ii) Entity 45 also recommends that the application and the evaluation | 

I process of the fintech companies be simplified. This will greatly | 

| enhance the number of participants. Failure to do so will negatively I 

impact the as is evident from other country models where restrictive 

, entry mechanisms have led to few players opting to participate in the 
Sandbox. 

(iii) Entity 45 also proposes that the usage of vendors such as Cloud 
Service Providers are important to provide the right technical support 
to ensure that the outcomes are accurate. This will provide the right I 
platforms and technical support availability. 

5. Paragraph 6.5: Fit and Proper Criteria: 

| Entity 45 recommen ds: We propose (i) any permitting entities 
| including start-ups working towards innovation, inclusion, 
development or improvement of products or processes to be 
considered; (ii) declaration by company and signed by the directors I 
j of the company (and not promoters) to provide an undertaking of 
j meeting the fit and proper criteria; (iii) providing clarity on the criteria 
| to determine satisfactory conduct of bank accounts by the entity 
j and/or its promoters/directors. Further, whilst we note that adequate 
security safeguards should be maintained, entities should be 
I permitted to demonstrate evidence of such safeguards by obtaining 
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international accreditations on data storage/management like 
ISO/IEC 27001, PCI and DSS controls. 

Entity 45 provides services to numerous financial institutions, has 
extensive safeguards to preserve the integrity of our customers’ data 
and meet our obligations to our customer, the financial institution. 
However, as a service provider to the financial institution, Entity 45 
responsibility is to meet the financial institution’s requirements (which 
typically includes meeting certain standards or requirements to 
ensure the financial institution is meeting its regulatory obligations). It 
is incumbent on the financial institution to ensure appropriate 
consumer safeguards are in place. 

6. Paragraph 6.6 Extending or Exiting the Sandbox: Exiting or 
Extending the Sandbox may also require flexibility. There should be 
a path to bring an innovation into line with the prevailing regulatory 
requirements, as well as a path for considering regulatory adjustment 
to accommodate innovation. Projects may progress at different rates 
and through differing stages. Some projects will come to a point 
where they are in full compliance with the regulations, while some 
may be awaiting regulatory revisions, and some will need to 
experiment further to prove viability, while others may not show 
sufficient progress or value and must be terminated. 

Entity 45 recommends: The Fintech entity would need to : (1) 
define clear objectives, parameters, success criteria and exit 
strategy, (2) define risks associated with the experiment- to the extent 
hey are able to, (3) work with RBI for periodic evaluation 

Entity 45 also proposes that prior to discontinuing sandbox testing 
in case an entity fails to comply with the relevant pre-set outcome and 
other conditions specified at any stage during the sandbox process, 
an appeal to the decision of discontinuance may be provided to the 
entity. In the appeal, the entity must specify reasons for such failure 
and provide an action plan to address the failure. Upon examination 
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| either permit or terminate the specific activities within the sandbox. 

Paragraph 6.8. Ensure Transparency and Paragraph 9 : 
i Disclosure: 

I Entity 45 recommends: Entity 45 proposes that the RBI has 
j reserved its right to publish any relevant information about the 
applicant. However, prior to such publication, we propose that the RBI 
| intimates the applicant of the details of disclosure. RBI should not 
impair the applicant’s confidentiality/proprietary /intellectual property 
rights, if any, with respect to the information intended to be disclosed. 
8. Paragraph 7: The Sandbox Process and its Stages in a Regulatory 
| Sandbox. A regulators agility and responsiveness are two of the key 
| aspects of a successful Sandbox environment. 

Entity 45 recommends: 

j (i) The Sandbox should allow for the agile development of new 
j services. Agile development is an approach to innovation that allows I 
for incremental, as opposed to iterative, revisions and amendments 
to an innovation. Over the 6-month period an agile-developed service 
may change as many as 20 times and could even pivot a few times 
from the original objective. This is the point of experiments, and we 
I therefore recommend building greater flexibility into the process to 
| allow for incremental changes to experiments (and 
| amendments/additions to hypotheses testing) with appropriate 

j reportin 9 t0 the Bank (taking into account all other criteria, including I 
changes in risk and risk mitigation). 

(ii) When a solution is entering the Sandbox, there should be a clear 
| process timeline, based on phased approach to meet the proposed I 
| objectives and timelines for the regulator's responses to a project and 
j for processing of subsequent reports or requests. Once a project is 
| underway, there may be a process for periodically evaluating the I 
_1 Pr0ject The valuation should be scoped and timed in a manner that 
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46 


is appropriate for the particular project. Review timing, and the time it 
takes for a response to an enquiry of the regulator should be clear 
and prompt. A project should not be burdened by excessive reporting 
once underway. There may come a time, depending on the project, 
to review to see if adjustments are needed for the continued 
participation in the Sandbox, or if adjustments to the regulatory 
obligations are needed, for example, to progress the project. Again, 
the time for a decision should be well defined and expeditious as a 

goal for the Sandbox is to bring innovation to customers as quickly as 
practical. 

We hope this submission is only the start of a conversation. As a next 
step, we would be pleased to engage with you to discuss this 
document in detail, and to address any questions you may have on 
our submission. 

“Enclosed please find the feedback on the Regulatory Sandbox 

framework, from Entity 46, 



Feedback for RBI’s Framework for a Regulatory Sandbox 
The Reserve Bank of India’s proposed framework for a Regulatory 

Sandbox is an important and progressive step for fintech innovation 
in India. 

We hope the RBI will use this important framework to seek and 
incorporate a range of live feedback from startups/industry as well as 
actual customer voices and aggregated, anonymized performance 
data as an input to policy making. This would go a long way toward 
more customer-centric regulations, and building appropriate 
consumer protection safeguards into new products and services. 
Such a framework could also allow the RBI to measure and 
incorporate industry and customer experience, such as transaction 
failure rates and analysis, resolutions and escalations, into policy 
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f mak,n9 - USIn9 a 99 re 9 ated_ data with adequate confidentiality and 
| privacy safeguards. 

I Some observations and suggestions we would wish to humbly place 
| f° r RBI’s kind consideration: 

• Only start-ups are proposed to be allowed to participate in the 
I Regulatory Sandbox. This excludes collaborative innovation from 
I startups working with incumbents with global expertise, some of them 
I With investments in innovative Indian fintech start-ups. Many startups 
| leverage current technology and expert.se of incumbents and build 
I around that. Regulatory sandboxes in the EU and several nations I 
allow incumbents. Hong Kong allows only established companies to 
participate in its regulatory sandbox. 

■ • There is a lack of clarity on the legal relaxation that would be 
| provided to fintech companies during the sandbox period. The 
| framework mentions that one of the limitations of the sandbox may 
J be the inability of RBI to offer any legal waivers. Since regulatory 
relaxation appears to be a necessary condition for a sandbox 
experiment and it is a form of [limited] waiver, we are unclear as to 
what is intended to be covered by the expression “legal waiver”. 

• The framework has excluded credit information/analytics as an 
j activity that can be sandboxed. It potentially inhibits innovation I 
I around leveraging alternative data (like utility/telecom payments) as 
"credit information" (for discerning creditworthiness). Given that credit 
remains under-penetrated in our economy, this exclusion will 
foreclose innovation where we need it the most. For instance, Indian 
startups are doing stellar work using Al and analytics on utilities' I 
, customer data (including telcos’) for reporting credit-worthiness of 
underserved or newly banked customers. 

I • As per the framework, the applicant may be asked to share PoC 
I results, and the RBI would monitor the empirical results during the 
testing through the Fintech Technology Unit. However, there is no 
I clarity on the confidentiality of the data. In fact, the framework 
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proposes that RBI reserves the right to publish any relevant 
information for the purposes of knowledge transfer”. We urge clarity 
on this, that such publication will be of aggregated data only, with 
specific product data and customer data subject to confidentiality and 
privacy. 

The RBI’s decision to keep cryptocurrencies, trading of 
cryptocurrencies and ICO s out of the purview of the Regulatory 
Sandbox is a surprise decision to many in the fintech space. Many 
experts believe that crypto coins and tokens are an important 
component of the blockchain technology and without having them 
included its really difficult to understand how the smart contracts and 
other approved blockchain technology will be tested. 

• Post sandbox testing, a successful participant may still require 
regulatory approvals before the product and services or technology 
can be allowed for wider use in the open market. Hence a period of 
26 weeks for the entire process, across the various steps outlined, is 
ambitious and would be difficult to adhere to for many products. Given 
the size of India, its languages and varying levels of access to 

technology and banking instruments, this may not be a viable time 
frame. 

• The framework mandates declaring “an acceptable exit and 
transition strategy" (6.5.6) in case the pilot service has to be 
discontinued. This seems to be a problematic clause as companies 
usually try sandboxes for business ideas that don’t really have a 
conclusive exit plan. To force an exit plan for a startup for typically a 
beta level product seems to be overkill. 

• The framework makes it mandatory for companies to share the 
results of proof of concept (PoC) testing of use cases" before 

entering the fintech sandbox. By virtue of its nature, a regulatory 
sandbox is supposed to provide a test bed for ideas that make take 
a lot of time to mature; and those final ideas may actually get tweaked 
from what the original idea was. Thus requiring all of them to have a 
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tested POCs first, apart from a clear exit strategy, is presumptive and 

restrictive of innovation. 

47 

We welcome the draft proposal on regulatory sandbox. Financial 
services companies in payments, lending, digital customer 
onboarding and others, are looking forward to test their products and 
scale up in a limited environment within the compliance framework 
set up by the Honorable Regulator. This will enable Fintech 
ecosystem to grow and would help in achieving greater digital 
financial inclusion. 

In continuation to the draft enabling framework, we have enclosed 
our feedback for kind perusal of the Honorable Regulator. 

Feedback on Draft Enabling Framework for Regulatory Sandbox 

1. Fit and Proper Criteria to be revisited: (a) At present, the eligibility 
to be included in a Regulatory Sandbox is restricted only to start-ups 
(as defined by Department of Industrial Policy and Promotion in its 
notification dated April 11, 2018). This limitation shall exclude most 
of the established FinTech which have necessary resources, 
technological platform and customer reach to contribute in the 
development of new financial products and innovation. Relaxation on 
this eligibility criteria will allow technologically advanced and resource 
efficient FinTech to participate and contribute in the “disruptive 
innovation” for digital financial inclusion. 

(b) The Draft Framework states that the applicant is required to 
demonstrate that its proposed product is technologically ready to be 
deployed in the broader market. This scenario stipulates that the 
participating FinTech shall have to demonstrate that their product is 
ready to be deployed at scale even before they qualify as the eligible 
participant of the Regulatory Sandbox. RBI can consider the 
approach wherein a FinTech is permitted to participate in the 
Regulatory Sandbox and then should be allowed certain sufficient 
time to develop a new financial product in light of the relaxed 
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regulated environment. This relaxation would allow an eligible 
FinTech to raise new investments and dedicate more resources 
towards the development of new and revolutionary financial products. 
2. No legal waivers: Section 4.3 of the Draft Framework highlights the 
restriction on RBI or the Regulatory Sandbox to offer any legal waive 
Regulatory Sandbox to the participant companies. RBI needs to 
clarify the legal relaxation offered to the participating FinTech during 
the sandbox period. RBI may take a cue from the Consumer Finance 
Protection Bureau in United States which issues a “No Action Letter 
to an entity in a sandbox and offers Regulatory Sandbox protection 
against any adverse Regulatory Sandbox regulatory action during the 
period of the sandbox. RBI may adopt similar mechanism in India to 
protect the bona-fide development of new products by the 
participating FinTech. 

3. Critical area excluded from Sandbox Testing: The Draft Framework 
proposes a positive list and a negative list of services/products/ 
technologies that can and cannot be considered for testing under 
Regulatory Sandbox. One of the notable exclusions from the lists is 
"credit information." According to recent industry reports, 156 million 
Indians who comprise of ‘urban mass’ and urban middle’ section 
representing an annual income of USD 3000/- and above have the 
potential of mass adoption of consumer credit. The aforesaid ‘urban 
mass’ constituting approximately 129 million have been mostly 
deprived of credit due to lack of credit history. 

Considering the young urban mass which are currently financially 
excluded, prefer Regulatory Sandbox to avail small ticket loans for 
short term, the existing traditional lending platforms such as banks 
and NBFCs’ find it unviable to serve this segment. In addition, the 
lack of credit history further dampens the situation. Here, latest 
innovations of FinTech like Social Loan Quotient (SLQ), Alternate 
^Credit Scoring (ACR) may play a pivotal role in helping this large 
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p"^PP^ d Population to avail credit based on the score g^tedb7 
the system. 

I FinTech must be allowed to develop new credit information systems 
which can provide services to this marginalized population at large 
and contribute towards the digital financial inclusion in the country. 

4. Confidentiality: Start-ups and FinTech invest considerable amount I 
| of resources to develop their intellectual properties around their 
| products. However, the Draft Framework under Section 9 states that 
, The RBI shall reserve the right to publish any relevant information 
I ab0Ut the REQ ULATORY SANDBOX applicants on its website, 

| including for the purpose of knowledge transfer and collaboration with 
| other international regulatory agencies”. In order to protect the rights 
I of the participating FinTech, RBI should either water down or 
| completely remove this provision from the Draft Framework. This step 
| of RBI will not only restore the confidence among the participating I 
| FinTech that their technical know-how in the products will remain I 
| secure with the Regulator but will also boost confidence among other I 

_I F 'n Tech to jo in the Regulatory S and develop new products. 

48 it's good to see thaU^li^doptii^^^ 

I strange to see we are ignoring crypto assets. Crypto assets are the I 
| part of blockchain ecosystem and it is medium to pay incentive to I 
| stake holders. Both things, blockchain technology and crypto assets 
| go hand in hand. 

I Many people in India may possess or trade crypto assets. If we don't 
| allow them obviously they may use international exchanges for 

| trading which will result in indirect loss to Indian crypto exchange or | 
Indian economy. 

| Humble request to reconsider this and allow individuals to possess/1 
| trade crypto assets. It's ok not to accept crypto as payment method I 
| but Please allow individuals to possess/trade crypto assets. 
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49 

Placed below are the comments of the undersigned: 

1. The products/services to be considered in Regulatory Sandbox 
(RS) should pertain to the sectors/domain that come (or may in future 
come) under the regulatory purview of the financial sector regulators 
for better execution at this stage viz. digital identification services and 
cyber security products may not be considered as these are very 
generic in nature. 

2. There should be a presence of atleast one fintech entity in each 
product/service that will be granted approval. 

3. The minimum net worth requirement of Rs.50 lakh may be reduced 
to Rs.5-10 lakh since the technologically driven start-ups tend to have 
lower capital requirements and having initial investment of Rs.50 lakh 
may lead to less number of applications. 

50 

1) What is the method of applying for the RB on our part? Do we 

need to submit a document elaborating on how we meet the criteria? 

If yes, in what format? (word doc, pdf etc) 

2) From whom (designation) does the application have to be 
submitted? 

3) Do we need to share any additional supporting material along with 
the application? If yes, what all can / should be shared? 

4) What is the process of selection? Will there be a product 
presentation / demo? 

51 

from 51, 
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the regulatory sandbox; 

1. Theme based RS project selection enabling more companies to 

participate in the RS - Instead of conducting RS with individual 

companies, group of companies should be allowed to ideate and work 

together to solve a common problem, optimize problems or design 
new solutions 

2. The Start-up’ criteria needs to be removed and the option to 

participate should be available to all fintech companies irrespective 
of size 

3. For companies selected by RBI. intellectual property rights needs 
to be clearly defined and mutually agreed as most fintech companies 
will be concerned about the confidentiality of information and 
disclosures regarding proposed product, service or technology 

4. Certain projects would require collaboration, including data sharing 

between the 3 regulators - SEBI, IRDAI and RBI during the course 
of the RS 

5. eKYC/eAUTH is an essential requirement for certain projects in RS 
to succeed (if taken up). Clarity on allowing eKY/eAuth for fintech 
companies should be taken prior to the commencement of the RS 
"Excluding crypto assets altogithiTwill only t^ki~b^dTl?idii^ 
companies by few more years. Sadly only millennial govt employees 
can understand the worth of new tech. Oldies in rbi must go to make 
space for Young blood who have guts to experiment new tech. 
Eventually rbi will have to allow companies like ripple who have "in 
production" use case for settling payments using digital assets only if 
blind people at rbi can see. 


52 


Hope this email finds you well" ' ~ ---— 

Please find attached inputs from Entity 53 on the draft enabling 
framework for the regulatory sandbox. 

For any queries, please reach out to us 
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We look forward to participating in this initiative. 

Comments from Entity 53 on proposed regulatory sandbox for 
fintechs by the RBI 

1. For the sandbox to lead to maximum positive outcomes that should 
augment the growth of the financial services industry, we recommend 
that participation of fintechs should not be restricted by having 
maximum revenue or any other criterion as an eligibility parameter. 
Since, most bigger fintechs have established themselves through 
market disruptions, their participation in the sandbox may be 
extremely relevant and is likely to result in more meaningful outcomes 
for consumers and the ecosystem. Also, many fintechs, especially 
aggregators, offer a wide range of products and services and while 
they may be an established entity in one, they may be a new entrant 
for another. 

2. The participating fintechs, instead, could be restricted by the 
number of transactions under the sandbox, to encourage sound 
decisioning along with controlled, conducive and safe 
experimentations. This limit on transaction volume should be 
determined according to the product and service offered. 

3. The end-to-end application process for a fintech to enter the 
sandbox, according to the working committee report, will take ~20 
weeks, which is too long to be viable for most fintechs. We 
recommend either few steps or faster turnaround time so that there 
is meaningful participation by relevant players. 

4. In case the regulator has specific areas / issues it intends fintechs 
to address through the sandbox, it should be called out distinctively 
and prioritised for testing, so that relevant fintechs choose them, 
instead of participating in varied experiments. 

5. The evolution of fintechs have led to new-age hybrid products that 
may fall under the purview of multiple regulators. It is recommended 
that the engagement under the sandbox involves all financial services 
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^gul alu , s as an inter-regulatory unit, for fintechs to test innovations' 
under the guidance of all relevant regulators. 


54 


This is with regards to the clause b.b.1 (a) of the Draft Enabling 
Framework for Regulatory Sandbox dated 18 April 2019.“The entity 
should be a company incorporated and registered in India and shall 
meet the criteria of a start-up as per Govt, of India, DIPP Notification 
No. G.S.R. 364(E) dated April 11, 20181” 


55 


We would be most grateful for RBI to consider exceptions to this 
clause if the ideas are protected by patents, ground-breaking in 

nature and will help over a billion people if deployed (and meets the 
rest of the criterion). 


| Our Fintech initiative, Entity 55 has 
done a detailed review of the Draft Regulatory Sandbox format 

published by RBI. Also feedbacks have been collated from the 
Fintech sector. 
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Please find attached our comments in the attached document. 
Looking forward to work closely to leverage benefits for the 
betterment of the Fintech sector. 

Observations and recommendations on Draft Enabling Framework 
for Regulatory Sandbox published by RBI 

The Reserve Bank of India (RBI) has released a draft of enabling 

framework for Regulatory Sandbox asking for FinTech and RegTech 
ecosystem comments. 


I is in the 


Entity 55, an initiative of | 


process of operationalizing the FinTech policy created by GoM. This 
includes building FinTech API Sandbox, creating FinTech registry, 
establishing a Fintech education platform, coining a Fintech investor 
platform at Mumbai, conceptualizing a global market access platform 
and few more initiatives to strengthen FinTech ecosystem and 
support innovation across India. 

This document includes collective feedback from Fintech startups, 
influencers, government IT representatives and industry 
representatives, on the Regulatory Sandbox framework. 

Mentioned below are a few observations and recommendations for 
the draft framework for RBI regulatory sandbox. 

List of key observation/comment/recommendation (Section 
wise) - 

Process efficiency (Reference to Section 4.1) 

Section 4.1 seems at odds with the nature of a regulatory sandbox. 
The idea is to make the process streamlined and less onerous, so 
stating that firms’ risk "losing flexibility and time" in the sandbox needs 
reconsideration. 

No legal waivers: (Reference to section 4.3 and 4.5) 

The framework highlights that one of the limitations of the sandbox 
may be the inability of RBI to offer any legal waivers. Since regulatory 
relaxation appears to be a necessary condition for a sandbox 
experiment and it is a form of (limited) waiver, it is not clear what is 
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would be offered during the sandbox period. The Consumer Finance 
Protection Bureau of USA a “m^ .... 


regulatory action during the period of the sandbox. 

Recommendation - It will be apt to consider removal of section 4.3 or 
else certainly a ring-fence of some nature would be of critical 
importance if the regulatory sandbox framework is to facilitate 


Point 4.5 suggests the company is fully liable for consumer losses in 
the sandbox. But limited liability and controlled experimentation are 
key. This can be mitigated by design. Also, there is no overarching 
financial consumer law in the country, and a data protection 
legislation is still just being formulated. In the absence of both, fielding 
obscure regulations without clarity on liability and compensation is 


Innovative product/solution should be focus (Reference section 

I 6.2) 

Section 6.2 lists down some of the innovative technology, whereas 
| innovation needn’t have to be bound by set of technologies. As long 
j as a product/service/solution solving a key challenge and fulfills the 
| fitment criteria, should be considered. It may or mayn’t be developed 
using Blockchain/AI/ML/Big data etc. 

Recommendation: This should be an indicative list and shouldn’t 
contain innovation among a fixed set of technologies. 

Regulatory requirements/ relaxations (Reference section 6.2) j 
Section 6.2 lists certain regulatory requirements that have to be 
observed by applicants. This list includes data protection regulations, 
KYC requirements, and ’statutory restrictions. These requirements 
could induce confusion, and also prevent innovation in areas such as 
KYC, consent mechanisms, etc. The underlying issue, however, is 
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to be addressed”- how to“^jre that basic 

regulations are followed when products/ services are tested in the 
RS. 

| Contradiction example - Section 6.1.1. has included Digital KYC as 

| well as Digital Identification Services under innovative products / 

| services to be introduced. However, under section 6.2, there is a clear i 

J mention that mandatory requirement would regulatory requirements ' 

of KYC. This would destroy the utility of innovation around Digital I 
KYC. 

J Recommendations : Replace paragraph 6.2 with a statement 
reflecting the fact that any regulatory requirement which has NOT 
been explicitly relaxed as part of the application approval process, is 
| assumed to apply in full. This would ensure that applicants adhere to 
| all general legal and regulatory requirements (including KYC, data 

| protection, information security, etc.) while also not hindering 
innovation in these fields. 

| Or else recommendation is that there may be a waiver given for 
| Digital KYC cases from regulatory requirement of regular KYC. 

I Exclusion from Sandbox Testing (Reference section 6.3) I 

Technology and Innovations are fast changing across the globe I 
which has the potential to impact Financial service. In this arena of 
change, putting a hardbound exclusion in Regulatory Sandbox 
framework document might not be appropriate. 

The ‘negative list’ of products/ services which will not be accepted 
I into the RS includes ‘credit registry’ and ‘credit information’. These 
j are the key areas of innovations in the Indian ecosystem and are 
| enabling financial inclusion/lending to new to credit customers 
Innovation in both of these sectors is crucial for the improved 
penetration of credit in India. While appropriate safeguards could be 
| put in place to ensure that actions within the RS do not have any 
| effect on an individual’s real-world credit score or a company’s credit 
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Tating, these categories should not be blocked from inclusion in the' 
RS. 

Recommendations: Credit registry and Credit information may be 
removed from the negative list. 

Or else, the whole negative list can be removed from the framework 
document, whereas a list can be published before every cohort 
depending on the changing market needs for innovation. 

Size of cohort (Reference Section 6.4) 

It is mentioned that there would be 10 to 12 startups would be 

provided access to Sandbox. This is comparatively smaller (UK FCA 
has '-'30 a year on average). 

Recommendation - The total number of startups in RBI regulatory 
sandbox should target to cover more in proportion to the size of the 
market and availability of innovative solutions. (Thematic cohorts 
running in parallel could be apt) 

Or else, it could be considered as appropriate to replace the idea of 
thematic cohorts with a rolling application process, and without any 
limitation as to theme or sector. 

Eligibility thresholds need to be inclusive (Reference to 6.5): 

As mentioned in Section 6.5.1 (a), the eligibility to be included in a 
sandbox is restricted to start-ups per Department of Industrial Policy 
and Promotion definition with a minimum net worth of Rs. 50 lakhs. 
This excludes innovation of a collaborative nature between 
incumbents and start-ups. Also, innovation struggling to find a market 
due to its disruptive approach would find access to this sandbox 
limiting. Unbundling has given way to an ecosystem approach with 
“bank-as-a-platform” thinking where banks facilitated specialist 
services to plug in through APIs. 

Recommendations: Reconsider to remove the condition in para 
6.5.1(a) requiring the applicant to be a ‘startup’. 

Or else, there should be a provision for incumbent and/or early stage 
innovation applications. 
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Section 6.5.1 (e), seeks a satisfactory” CIBIL or equivalent score of 

the applicant’s promoters/ directors, this stipulation is unduly 
restrictive. There are other ways in which an entity's (applicant's) risk 
towards its counterparties and consumers can be secured. One is 
already hard-wired through net-worth Rs 50 lakh requirement. 
Recommendation: This should be reconsidered as the net-worth Rs 
50 lakh requirement is already hard wired. 

As per Section 6.5.1 (f), the applicant is required to demonstrate that 
the product is technologically ready to be deployed in the broader 
market. An applicant would only seek registration in a regulatory 
sandbox because a current regulation is inhibiting a given 
product/service from being produced/supplied; (or in a scenario 
where the regulatory framework is absent altogether given the 
novelty). Absent regulatory relaxation/ clarity, a start-up would find it 
very difficult to find venture capital investment. And absent the 
investment, it would be virtually impossible for a start-up to develop 
the technology to a stage where it is readily deployable. 
Recommendation: Thus, this condition appears to impose a 
significant and unfair burden on start-ups and ought to be removed. 

As mentioned in Section 6.5.1 (g, h & i), fit and proper criteria for the 
startup from business side is too stringent and will debar most early- 
stage startups from participating in the sandbox. The expectations 
from the technology side would be very challenging as it even 
includes an audit by RBI to check the integrity of the systems. This 
would reduce the number of startups reaching out to sandbox and will 
also slow down the process. Typically, audit process and closure take 
minimum of 3 to 4 months, which will make the end to end process 
expensive to run. As observed in normal practice, regulated entities 
like NBFCs go through audit post facto. If IT audit is made compulsory 
part of the evaluation process, it will create grave challenges in early 
stage startup community to enter the regulatory sandbox. 
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cntena from the business side. In addition, the IT requirements should 
be reduced to a basic level including self-declaration by the startup 
or a light weight evaluation checklist. 

Confidentiality (Reference to Section 9): 

The framework has proposed that the RBI may require the applicant 
to share PoC results and through the Fintech Technology Unit 
monitor the empirical results during the testing. The draft offers no 
clarity about the confidentiality of this data. Alarmingly, the framework 
proposes that RBI: “reserves the ‘right to publish any relevant 
information...including for the purposes of knowledge transfer...” 
Start-ups invest resources to come up with their secret sauce and 
there are good social reasons for letting them retain confidentiality 
around their secret sauce. Language, as occurs in the disclosure 
section, is too wide including especially the knowledge transfer 

wording. Going through the process of experimentation is costly. The 
firm entering 

the sandbox is blazing a trail for others-effectively creating its own 
competition by demonstrating the viability of a business model. These 
are tricky issues that need to be finessed and discussed 
Recommendation: As, business risk hasn't been mentioned in the 
draft. One key risk for businesses entering a sandbox is the leakage 
of its IP into the public domain. So, some safeguards need to be 
provided or discussed to make this appealing for businesses. The 
section ought to be watered down / removed altogether. 

Overarching point of views for consideration 
Collaboration with other Regulatory bodies 

The current draft doesn’t mention anything about interaction with 
other Regulatory sandboxes. 

In section 3.3, RBI has included microinsurance as one of critical 
areas of innovation, this has no mention in areas of innovations under 
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6.1.1. Although this could be a candidate for IRDA regulatory 
sandbox, there will be opportunity/need of collaboration. 
Recommendations: Innovations across insurance / wealth 
management etc. should also be included in the scope sandbox with 
direct and single window support from RBI / IRDA / SEBI. The 
Regulatory Sandbox also need to consider how to collaborate with 
other regulators and other government FinTech Sandboxes. This 
would strengthen the regulatory influence and boost the innovation in 
FinTech ecosystem. 

Also, wherever applicable as an exception, a cross regulator sandbox 
screening process would provide startups a wider opportunity to be 
mapped to the right sandbox and leverage the initiative. A joint 
periodical review of such exception applications by all 3 regulators in 
an inter-regulatory council would act as a much bigger platform for a 
startup to present their use case. 

City as a Sandbox: 

The draft has broadly defined the construct of the batches and how 
the program will be executed. However, it lacked information on how 
the test environment will be created and how would any relaxed 
regulations be tested against any hypothesis. 

Recommendations: It will be apt to define a geographical boundary 
in a city and allow selected startups to showcase results for the 
presented use case by testing the product within a real homogenous 
user group living that defined zone. E.g. Mumbai can be considered 
and prepared for the theme. That should include set of FIs, 
Merchants, consumers, NGOs etc. who will help defining sample set 
and driving experimentation. 

Focus on wholistic innovation 

The present draft framework appears to foreground application-level 
innovation more than innovation on the core financial product/ 
service. In order to service every segment of India and push forward 
on financial inclusion, the financial sector needs new types of basic 
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purpose of a regulatory sandbox should be to foster innovation across 

all levels of the financial ecosystem, including the underlying core 

financial product/ service, licensing architecture and as well as the 

customer facing distribution channel. This is the mindset through 

wh,ch the sandbox should be architected, and should also guide the 

decision making when it comes to approving applications to run in the 
sandbox. 

Collaboration framework with Fintech ecosystem is not clear. 

The current draft mentions about the Fintech Unit inside RBI, 

whereas its not very clear how the collaboration with broader Fintech 
ecosystem will take place. 

Recommendation: There is a need to identify a committee from 
Fintech / Digital ecosystem to collaborate with Fintech Unit (this could 
include existing industry/fintech representative entities like FCC PCI 
iSPIRT, Mumbai Fintech Hub etc.). There should be publicly 
shareable updates as everyone in the industry would be looking for 
guidance/updates. 

Open to Collaboration with Global Regulatory Sandboxes: 

The current draft doesn’t include any opportunity for solutions that 
needs deployment for cross border transactions. 

Recommendation. A framework to liaise with Regulatory Sandbox of 
other countries could broaden innovation experimentation window. 

Reference application/evaluation checklist: 

The draft doesn’t include any sample application form/ evaluation 
checklist. 

Recommendation: A reference as annexure to a filled application 

form and indicative checklist for evaluation will help better 
understanding for applicants. 

Focus on Data Privacy: 
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| With the current heightened digital environment, there needs be 
| dedicated focus on Data Privacy. The Regulatory Sandbox might get 
I benefitted by running an explicit Data Privacy theme cohort. 

| Monitoring/process after Exit: 

| At the end of a cohort, when an entity of Regulatory Sandbox exits, 
j what would be monitored or conditions post exit should be mentioned 

| clearly. E.g. the go ahead, change in regulation, product roadmap 
etc. 



- The FinTech API sandbox may be considered to list Regulatory 
APIs of (the selective set as appropriate) 


- Aid the screening and curation process for the RBI regulatory 

sandbox by leveraging the already existing selection framework from 
Mumbai Fintech Registry 

- Entity 55 Accelerator cohort entities can be routed to Regulatory 
Sandbox for consideration/final evaluation 

- Entity 55 (collaborative entity with Fintech sector) along with other 

industry entities may volunteer tQ curgte 

innovation listing for inter regulatory council discussions. 

- Entity 55 (collaborative entity with Fintech sector) along with other 
industry entities and departments may aid in supporting City as a 
sandbox theme for Mumbai. 


230 











Entity No I P«bliTcSiSSH5?-Fi5dbSrSJ^^ 

I Draft Framework for R egulatory Sandbox 

“ r ir ° ra '^^ 

coming up with the Draft Regulatory Sandbox(RS) framework for the 
I Indian market. Such a platform would allow companies to test new 
| products/solutions in a live but controlled environment on a small 
| group of users before scaling up. India is one of the fastest growing , 
Fintech markets in the world and this should further drive innovation 
in the financial space. However, we do see couple of areas in the 
Draft framework which seem restrictive and are outlined below and 

would request the Department of Banking Regulation to make these 
areas less restrictive 

1) 6.5.1(a) - The draft framework mentions that only start-ups 

can participate in the RS. While there is a lot of innovation which start¬ 
ups have brought to the market in the last few years, it does not mean 
| that companies which have been running for 7 or more years are not 
innovating. The data explosion all around has happened in the last 
few years only and so existing companies (> 7 years old) have now 
got the chance to develop interesting applications using new age I 
technologies based on this data. So, this criterion should be made 
| more broad-based to enhance overall innovation. 

| 2) 6.3 - Exclusion from Sandbox Testing : Credit information is 

| mentioned in the negative list. In India, the challenge is that there is I 
a vast majority of unbanked/underbanked people who need credit butJ 
are unserved/underserved as financial institutions typically don’t 
| cater to them as they are based out of rural/semi-urban areas. We 
| need new age credit appraisal methods leveraging technology which 
serves this segment and further financial inclusion which is 
| mentioned as one of the indicative innovative areas of RS under 
6.1.1. So, we need to have credit information of customers available 
to build and test models which also employ alternative data like text 
and images. There should be mechanism in place in the RS to ensure 

, that the customer privacy is not compromised while building such 
models. 
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Request the department to kindly consider the above two areas for 
some relaxation. 

57 

Entity 57 welcomes the opportunity to comment on the Draft 

Enabling Framawork for R&gulatory Sandbox (Ragulatory Sandbox) 
published by the Reserve Bank of India's Department of Banking 
Regulation. Entity 57 and its members wish to commend the 
Government of India for undertaking an initiative intended to provide 
a dynamic platform for regulatory reform to promote growth and 
deepening of the Indian economy. The Regulatory Sandbox 
contemplated by the Government of India will be critical to attracting 
further investment and innovation, ensuring current regulation 
remains targeted and efficient as market segments continue to 
evolve, and will lead to market integrity and protection of the Indian 
consumer across the various sectors. 

The Regulatory Sandbox approach represents a critical step in 
supporting the facilitation of fintech innovation that allows for 
experimentation while limiting risks to consumers and the financial 
ecosystem. To achieve this result, Entity 57 members believe: 1) the 
scope of the proposed sandbox must be sufficiently broad to permit 
a diverse set of participants in all stages of development, regardless 
of whether they are foreign or domestic companies; 2) allow for a 
diverse set of products and services; and 3) utilize a principle based 
approach to the Regulatory Sandbox that has a robust and 
transparent public consultation process. 

Entity 57 provides the following comments for consideration as the 
Reserve Bank of India develops the Regulatory Sandbox. 

1. The scope of the Regulatory Sandbox should permit a wider 
category of firms to participate. 
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"ThTRBi s draft framework adopts a highly restrictive approach to' 
determining which entities can participate in the regulatory sandbox. 
Eligibility is limited to startups, as defined by the Department of 
Industrial Policy and Promotion (DIPP) guidelines. By permitting only 
a narrow category of firms to participate, India risks missing out on 
critically innovative products and services that could be developed by 
larger players in India's fintech space. To foster innovation and 
promote strategic partnerships, Entity 57 respectfully 
recommends the RBI widen the ambit of its sandbox to allow 
participation from traditional players like banks, payment 
networks, and financial institutions, as well as non-traditional 
players like fintechs. A good example of this concept in action is the 
United Kingdom Financial Conduct Authority's ("UK FCA") sandbox, 
which is offered to both incumbents and starts-ups, whether 
operating independently or in partnership, to help trial innovative 
products that may not be able to reach the market without the benefit 
of a sandbox environment. Hong Kong, Malaysia, Abu Dhabi, 
Singapore, Australia, Thailand, and Bahrain have also allowed 
traditional players to participate in their respective regulatory 
sandboxes, alongside fintechs. 

2. The proposed Regulatory Sandbox should adopt a blue-sky 
approach that permits a wider range of products accepted for testing 
than currently contemplated in the draft. 

The RBI's draft framework includes a list of products, services and 
technologies that it will not accept for testing. A regulatory sandbox 
should ideally adopt a blue-sky approach that helps generate ideas 
for products and services in the fintech space without limitations on 
the type of product. To create more innovative and cost-effective 
solutions, Entity 57 recommends opening participation to any legally 
sound product, service, or technology that can address an existing 
gap in the financial ecosystem. 
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To that end, it is also important for regulators to tailor the sandbox 
experience in a way that makes sense for each firm’s business 
model. Entity 57 respectfully submits that the sandbox facilitators’ 
role is not to create a one-size-fits all approach, but to support firms 
and enable safe experimentation while still protecting consumers. 
Successful sandboxes, such the one implemented by the UK FCA, 
have not provided participants with wholesale exemption from 
regulation, but rather created a set of regulatory requirements 
suitable to each participant. This judicious, firm-specific approach 
ensured that the sandbox was a safe space for consumers as well as 
participants. 

3. Regulatory Sandbox requirements should be the same for both 
domestic and foreign participants. 

The RBI draft requires entrants to be companies incorporated and 
registered in India. Restricting participation to local providers will 
restrain competition and limit the scope of innovative solutions that 
can benefit from the sandbox, and in turn benefit India. Recognizing 
that financial innovations can emerge from any source, regardless of 
its legal structure or its place of incorporation, Entity 57 members 
respectfully recommend that sandbox requirements must be the 
same for domestic and foreign participants alike, regardless of 
whether they are incorporated in India. 

4. The RBI should enable sandbox entities to succeed in the long¬ 
term with support for their exit and transition into the marketplace 

In order to experience true innovation in the open market and help 
further India’s transformation into a “smart nation,” it is important to 
prepare participating fintechs for long-term success beyond the 
sandbox. Exit and transition strategies should be clearly defined and 
practicable. The RBI draft provides sandbox entities the option to 
apply for an extension of the sandbox period as long as the 
application is submitted at least one month in advance and with valid 
reasons for extension. Entity 57 members believe this is the right 
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J approacn and has met with success in other key markets. The UK 
j FCA, for example, has continued to work with a number of firms that 
have transitioned out the sandbox to help comply with existing 
I regulations while also working with regulators and standards setting 
bodies to adapt to these new entrants. Successful sandbox 
facilitators may also prepare participating firms for long-term success 
by working with regulators and standards-setting bodies to adapt to 
these new market entrants. Entity 57 commends this spirit of 
| flexibility in the current draft and encourages the RBI to provide 
continued support as sandbox entities exit the sandbox environment 
and navigate successful market entry and sustainability under the 
supervision of appropriate regulation. 

5. The RBI should consider creating a Virtual Sandbox to allow for 
greater innovation in new growth areas 

The Regulatory Sandbox is intended to provide a dynamic platform 
for innovation where participants can test their products, make the 
appropriate adjustments, and ensure that the release of new products 
does not create risks for consumers or the marketplace. Entity 57 
| members believe that a virtual sandbox is vital to realizing the full 
j scope of the proposed initiative. A virtual sandbox would allow 
| participants to test their solutions virtually without entering the real 
market. Such an option would be particularly helpful in situations 
where a test environment does not exist or in instances where there 
are significant barriers to entry into the Regulatory Sandbox. As such, 
Entity 57 respectfully request the RBI consider creating a virtual 
sandbox for these situations. 

6. The Regulatory Sandbox should be developed through a principle- 
based approach. 

The dynamic nature of the proposed Regulatory Sandbox will be best 
served by core set of principles to develop the framework as it 
matures and provides the platform for innovation and development. 
Alternative, mo re rigid, or rules-based approaches run the risk of 
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I 

limiting the ability of the framework of the Regulatory Sandbox itself 
to adapt to the changing innovation ecosystem and limiting the very 
growth it was intended to promote. Entity 57 respectfully 
recommends the framework for the RS should be developed through 
a principle based approach. The RS should adopt: “promoting 
competition, efficiency and innovation in the fintech industry while 
protecting cosumer’s safety” as its core principle. 

7. The Regulatory Sandbox should prioritize public consultation and 

have a robust and transparent process for public input and 
intelligence. 

Entity 57 members believe that to ensure transparency in regulatory 
development process within the Regulatory Sandbox, the RBI should 1 
prioritize public consultation. The proposed draft does not sufficiently 
take into consideration the full scope of benefits that a robust process 
of public consultation can bring to the development of sound and 
effective regulations. 

Globally, other regulators have found the public consultation process 
a key tool in developing an effective set of reforms. For example in 
Australia, the PSR Act requires the PSB to conduct public 
consultations in matters where it proposes the imposition or variation 
of an access regime or standard. In particular, the PSB is required to 
publish a notice summarizing the purpose and possible effects of its 
actions, invite submissions within a specified time, and consider any 
submissions that are received. Moreover, the PSB is also bound by 
general notification obligations, which require it to publish notice, and 
ensure that participants in the payment system are informed of 
actions involving the imposition or variation of an access regime or 
standard. Alignment with these global best practices will ensure the 
Droposed Regulatory Sandbox serves regulators with high quality 
intelligence and input from stakeholders as they make their 
deliberations. Entity 57 respectfully requests that the Regulatory | 
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P andb0X inclucle a rob “ st and transparent public consultation 
process. 

8. The scope of the Regulatory Sandbox should be expanded to 
include testing of new regulatory frameworks. 

| ThS RBI Should consider using the proposed Regulatory Sandbox for 
I not only reactive rule-making, but also for pro-active regulatory i 
| reforms. The objectives of the Regulatory Sandbox should not be 
limited to innovation in regulation for new products, services, or 
I business models in a live environment, but also include the testing of I 
| proposed new regulations under consideration for existing products, 
services, and business models. For example, the Regulatory 
| Sandbox could be used to undertake regulatory impact assessments 
I or cost/benefit analysis for existing services and products to 
determine how the proposed regulations will ultimately impact the 
fintech industry. Ultimately, this effort will enable the Regulatory 
Sandbox to fully realize its potential across the industry and not 

| mSreiy in the innovation space. Entity 57 respectfully requests that 
| the Objectives section of the draft proposal be expanded to include 

[ the testing of new regulations proposed by the RBI in a controlled I 
I environment. 

9. The Regulatory Sandbox should provide relaxation and waivers I 
from certain regulations to promote testing of products and services. 
Lastly, the RBI's draft framework highlights the regulator's inability to 
provide a waiver from existing regulations to participating entities and 
expressly disclaims any liability arising from participation in the 
sandbox experiment. (Section 4.3 - The RBI or its RS cannot provide 
| any legal waivers). It is unclear from the draft framework the 
reasoning behind the inability to offer a waiver from regulation white 
[ participating in the sandbox environment. Since a regulatory sandbox ( 
allows an entity to operate in a controlled environment, it is crucial to 
be able to do so under a waiver from certain existing regulation in 
I order for the enti ty to test products and services both to fully have the 
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flexibility to innovate without fear of repercussions. Such regulatory 
relaxations and waivers are the premise of regulatory sandboxes 
worldwide. While some regulators grant blanket waivers, others 
permit specific relaxations with regard to identified regulations or 
through waivers or no-action letters on a case-by-case basis. Entity 
57 recommends inclusion of suitable waivers for the participating 
entities in the regulatory sandbox environment. This approach allows 
sandbox participants to successfully test their products and services 
in an environment consistent with the objective of the regulatory 
sandbox designed to spur innovation in the sector. 

Entity 57 thanks your for your leadership in this matter, and we stand 
ready to assist you in any way that may be productive. We look 
forward to a meeting with you to discuss the matter further. 


At the onset, we thank RBI for supporting young organizations as 

ours, by allowing us to participate in the proposed regulatory 
sandbox. 

While we have initiated the process for registration for the RBI Fintech 

sandbox, we needed two specific clarifications on the sandbox 
process. 


b. While our lending partners - reputed Banks and NBFC under the 
Payments & Settlement Act - are offering the line of credit to the retail 
customer, does the proposed sandbox require the partner lenders to 
participate in the sandbox solution? 

We reiterate our enthusiasm to participate in the proposed sandbox 
process and hope to get some guidance on the above. 
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Framework for Regulatory Sandbox. 

The feedback is being provided on behalf of the following 3 

companies, which operate under the brand Entity 59 

Please let us know in case you require additional information and/or 
discussions. 

Feedback on The Draft Enabling Framework For Regulatory 
Studies 

Point No. 5. Eligibility Criteria for Participating in the Sandbox 

RBI has prescribed the eligibility criteria for companies to enter in to 
the sandbox. The condition is that the entity should meet the criteria 
of a start-up notified by Government of India. 

Our view is it should be open to all fintech companies rather than 
restricting it to startup companies defined by Government of India. 
Lot of fintech companies have developed path-breaking 
products/technology, which could bring a positive change to the 
industry/sector. They should not be denied opportunity to participate 
in the sandbox because of these restrictive criteria. 

Point No. 6.1 Sandbox Cohorts and Product/Services/ 
Technology 

6 . 1.1 Innovative Products/Services 

RBI has suggested a list of innovative product/services and 
technology which could be considered for testing in the Sandbox. 

We would like to recommend adding the following two 
product/services also to the list 

Digital agreements/Power of Attorney (no physical sign 
required) 

- Digital signatures (in all the places where the customer is 
required to sign) 

The future belongs to the digital sector. Hence, along with Digital 
KYC, the above two services will ensure the entities service 
customers are locations whe re it is physically difficult to set up an 
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( 

Pome No 77. The Sandbox Process and its Stages in a Regulatory 
Sandbox 

total time taken for the whole process to be completed in the 

Sandbox (from preliminary screening to final evaluation) is around 26 
weeks which is on the higher side. 

Our view is the RBI should look at reducing this timeline to around 
12-15 weeks. 

Point No.8. Statutory and Legal Issues 

During the Sandbox process, we may face some legal issues (from 

customer,etc). In the draft paper RBI has mentioned that the RBI shall 

bear no liability arising from RS process and any liability arising from 

the experiment will be borne by the applicant as a sandbox entity. 

Our view is that this could act as a deterrent for companies to come 

and participate in the Regulatory Sandbox. We suggest that RBI 

should extend some support to the companies in handling the legal 
issues. 

Point No.9. Disclosure 

The draft paper mentions that RBI shall reserve the right to publish 
any relevant information about the RS applicants on its website, 
including for the purpose of knowledge transfer and collaboration with 
other international regulatory agencies. 

Our view is that some of the process/technology might be innovative 
and first in the industry. Hence, secrecy to some extent must be 
assured. Else, companies may be hesitant to participate in the 
Regulatory Sandbox. Fintech companies might not like their in¬ 
nouse technology to be made public as they will lose their edge in the 
:ompetition. 
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In essence the draft regulations create a sandbox is not very different 
from other regulatory sandboxes. There are differences in 

a. the manner in which the regulations are presented 

b. specific documents that applicants must provide - I note that the 
RBI draft regulations spell out in detail certain documents. I suppose 
this requirement is partly because there will be a larger number of 

applicants in India and hence stipulating what is required earlier helps 
with filtering the applicants. 

c. The scope of the regulatory sandbox - I notice that certain Fintech 
ventures are excluded. I cannot help but say that the exclusion of 
these ventures is disappointing. In particular I note the exclusion of 
fintech ventures that deal with crypto currencies 

In my opinion, this exclusion: 

i. runs counters to the growing trend of cryptocurrencies becoming a 
new class of assets 

ii. regulators would want to be able to understand how fintech 
ventures interact with cryptocurrencies which are one other form of 
tokenization. Allowing them in the sandbox would permit regulators 
to develop finer grain regulations that excluded undesirable 
behaviour while permitting institutions to work with the new asset 
class or means of payment 

hi. since one key aspect of fintech going forward will be value that 
blockchain technology will offer, it would stand to reason that all 
manifestations of blockchain applications ought to be permitted and 
understood. It stands to reason that applications involving 
cryptocurrencies, which represents an application that enables not 
just payment but interoperability across platforms and sectors, should 
be included in the regulatory sandbox. The Gates Foundation, for 
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example, has a level one project, Mojaloop, as a digital money' 
solution for the unbanked. 
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"we write with reference to your notification dated April 18th 2019 
inviting comments on the draft framework. 

Please find attached hereto the scanned copy of our representation 

on the framework for your kind consideration. We would also be 
sending the hard copy by courier. 

In case of any clarification please feel free to revert to us. 

This is with reference to the captioned matter. We are hereby writing 
to provide our inputs / feedback on the "Draft Enabling Framework for 
Regulatory Sandbox" issued by the Reserve Bank of India ("RBI") 
vide a Notification dated April 18, 2019. 

At the outset, we wish to state that the Regulatory Sandbox 
framework issued by the RBI is the need of the hour for the FinTech 
Industry, being one of the fastest growing segments in the overall 
banking and finance industry in India. The rise in technological 
innovations in the recent past, digitization of the economy and net 
neutrality together necessitates safer avenues for testing of new 
products and technologies, faster decision making in terms of the 
regulatory approvals and most importantly a robust regulatory 

framework which is encourages and enables innovations in 
technology. 

Background - Who are we and our Commitment to Technology and 
Innovations 

Entity 61 
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It may be noted that the credit card industry is highly receptive to the 
evolution of innovations in technology of payment systems and 
enabling infrastructure. For example, with the introduction of net 
banking and payment portals, the 'swiping' of a credit card for its 
usage is not a required/mandated feature anymore. Customers input 
credit card information over information technology enabled platforms 
along with authentication to undertake credit card transactions for 
purchase of goods and services. With more technological innovations 
such as 'tap and pay', repeated swiping of Credit Card is also not a 
required or mandated feature for the use of such credit card. The 
users now store credit card information over secured technological 
platforms and use their credit limits through authentication features 
without swiping their card. Hence, technology is the bed-rock of any 
payment product and is paramount to the industry in this age. 

We wish to humbly submit that Entity 61 shares the Government of 
India's dream of cashless and digital economy and has been making 

persistent effo rts and significan t investment into its technology and 
infrastructure. ^- 
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Some Suggestions 

Some of our suggestions which the RBI may consider while 
formalizing the Regulatory Sandbox Framework are as follows: 

1 Expanding the scope of the “Innovative Products / Services (Para 
6.1.1). The definition of the products and services falling within the 
purview of the regulatory sandbox is fundamental to the framework 
and hence RBI must expand its scope to include other technology- 

based products / services, such as, digital onboarding of customers, 
e-applications, e-sign, etc. 

2. Clarity on the Nodal authority / body with RBI to approve / oversee 
the applications and the testing: The notification in its present form 
stipulates a FinTech Unit (FTU) within the RBI to be the nodal 
authority which shall be approving the applications, monitoring and 
overseeing the testing / products’ performance and evaluation. More 
clarity is required vis-a vie the FTU, its constitution, nodal officers, 
their governance and other processes. 

3. Post Evaluation: Some of the finer requirements / steps as 
applicable post evaluation / assessment of the testing by FTU require 
further elaboration. For example, would there be a standardized 
template within which the FTU shall share the results / outcome 
including the reasons for the same, specially in case of failure of the 
testing. 
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pimply, in case the a^ssment is positive, would there 

| track approval process for “making it live" in the real environment by 
the applicant. 

I 4. Appellate Authority: The RBI must also consider introducing an 

| aPPella,e mechanism ' whereby the applicant can appeal against the 
| decision of the FTU. This would not only foster transparency in the 

I decision making process but also impose that any decision/ approval 
| should be done judiciously. 

5. Timely Decisioning: The mechanism as mentioned under 

| Para 7 and the timelines of the process mentioned therein should be 

followed by an escalation matrix for any non-adherence of the 
I timelines and also for extension of timelines. 

6. Regulatory Licenses: As mentioned under point No. 4, the 
framework should also contain a mechanism/ process for using such 

| approval granted by the FTU for expediting the regulatory licenses. 

7. Knowledge Sharing: There must be a platform for sharing of the 
combined knowledge and recommendations for the industry. While 
the propriety information / innovative idea of an entity must be 

.preserved, however, if there are any generic lessons / 

| recommendations as may be emerging from the Sandbox, which 

| apply to all must be shared with the industry so that the industry as a 

whole can benefit from the same and use the best technologies 
! available. 

j thank y° u for the opportunity to comment on the Draft Enabling 
| Framework for Regulatory Sandbox, and provide herewith our I 
| recommendations on the same: 

• Section 5 - Eligibility Criteria for participating in the RS (Regulatory I 
| Sandbox ) ~ We recommend that eligibility thresholds should be 
j broadened. Currently, the eligibility is restricted to FinTech firms 
j which meet eligibility conditions prescribed for start-ups by the 
government. Banks or financial services firms desiring to innovate 
_ | with own or acquired technology should also be permitted to 
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rbreikmy"nuluvaliuii is nul completely ignored based on predisposed 
negative views. 

• Section 6.5 Fit & proper - Foreign and domestic banks and financial 

I SSrViCeS firms desirin 9 to innovate with own or acquired technology 
| should also be permitted to participate. 

j • 7.1- in this rapidly changing FinTech scenario, we recommend that 
the time frame for acceptance under the Regulatory Sandbox should I 
be fastened and processed within a shorter time frame. Further, we 
believe that regulatory approvals post sandbox testing will be quick 

and provide for enabling regulatory guidelines for quick launch of 
I products 

• Confidentiality - We recommend that any case considered under RS 
should be kept confidential to ensure that innovating firm get 
exclusive lead time on an idea conceived by them. Otherwise 
competition will know about it before they are ready to deploy in live 
I produc,ion We suggest that details be kept confidential at least for 
| the RS duration of 6 months. Post that, it could be published - both 
j for approved and rejected cases. 

“ f M e"*ers or i-ramework for RS my feedback is in sSSbSffijASil 
when a customer add a beneficiary there is a cooling period of 2 Hrs. 
and in many cases 24 Hrs. can banks brought down that cooling 
period two zero Hour as this is already in some other banking Apps. 
And second one is that an User ID+Password OPT based login 

should be for all the nationalized banking Apps because this is most 
I secured way of login into Apps. 
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I' am Writin9_, ° you ,0 PravldMSdb'ack on the draftlSi^TfoT 
I enabling regulatory sandbox. Firstly I would like to state that the draft 

IS really well written and that I have been eagerly awaiting it for many 
months. 

| My feedback is specifically about the role of the financial service 
| provider and that of data. The Regulatory Sandbox (RS) framework 
draft starts by defining RS as a partnership between 4 entities - the 
innovator, the financial service provider, the customer and the 
j regulator. However it falls short of detailing the role of the financial 
service provider in this mix. Crucially, for some of the use cases, both 
the customer and the data may be that of the financial service 
provider, thus it is important to define this aspect further. 

Some of the questions that the regulator needs to answer are: 

1. Can there be more than one financial service provider in a cohort? 

2. Can the financial service provider share customer data with the 
innovator? 

3. Can the innovator use public data that the financial service provider | 

is able to access (such as credit rating data, or NSDL data) for the 
| duration of the cohort? 

I Apart from this, I have another point of feedback. Based on my 
reading of (6 5), it appears to me that the RS is assuming that 
innovators are only to be found among start-ups. I feel that restricting 
| innovators to the group of start-ups is a needless constraint. I would 

be happy to meet you and discuss these points in person. I am eager 
J to co ntribute to the success of RS. 

| With reference to theTnvTtation for public'commehts asltu'bliihid by] 

the Reserve bank of India, please find attached, for your! 

| consideration our comments on the Draft Enabling Framework for 
| Regulatory Sandbox. 

j Please do let us know if you require any clarifications in relation to 
our attached comments as we would also be happy to meet with you 
and discuss the same in further detail. 
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| FEEDBACK ON THE DRAFT ENABLING FRAMEWORK FOR 
I REGULATORY SANDBOX 

With reference to the invitation for comments from stakeholders as 
| published by the Reserve Bank of India, we have set out below for 
[the consideration of the Chief General Manager-in-Charge, 

| Department of Banking Regulation, Reserve Bank of India (“RBI"), 

| our comments on suggested clarifications / amendments to certain 
, provisions of the Draft Enabling Framework for Regulatory Sandbox 
(“Sandbox Framework”). 

j (a) Section 6.1 Sandbox Cohorts and Product 1 

| Services/Technology 

| It is mentioned in Section 6.1 of the Sandbox Framework that the 
Regulatory Sandbox (“RS") may run a few cohorts (end-to-end 
| sandbox process) with a limited number of entities in each cohort 
I testin 9 their products in a stipulated period and with the RS being 
based on thematic cohorts focussing in financial inclusion, payments 
| and lending, digital KYC, etc. 

| Comment: By placing a requirement that a cohort would be required | 

| to be thematic, it would mean that an entity’s ability to participate in | 

| the RS to test any of its products/services would be subject to such 
product/service being a product/service that would be the theme of a 
| cohort as well as there being sufficient space in such cohort for the 
j entity to participate. In the event that an entity’s product/service either 
| did not fall within the theme of a cohort or there was no space in such 
cohort, then it not be possible for the entity in question to participate 
in the RS. It is therefore submitted that there should be no 
I requirement for a cohort to be thematic. 

(b) Section 6.2 Regulatory Requirements/Relaxations for 
j Sandbox Applicant 

| It is mentioned in Section 6.2 of the Sandbox Framework that on the 
regulatory requirements that would be mandatorily maintained by 
applicants would be KYC/AML/CFT requirements. 
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Comment: It is submitted that credit information should not be in the 
negative list as there could be significant innovation in this space 

especially for unbanked sectors where financial inclusion measures 
are urgently required. 

(d) Section 6.5 Fit and Proper Criteria for Selection of 
Participants in RS 

(i) Section 6.5.1 of the Sandbox Framework specifies certain 
conditions required to be satisfied by entities to be eligible for 
selection to participate in the RS. These conditions include: 

(1) Section 6.5.1(a) which stipulates that the entity should be a 
company incorporated and registered in India and shall meet the 
criteria of a start-up as per Government of India DIPP Notification No. 
G.S.R. 364E dated April 11, 2018 (“Start Up Criteria”). 

Comment: It is submitted that by requiring that by limiting the ability 
to entities meeting the criteria of a start-up as per the Start Up Criteria, 
banking companies/non-banking financial companies/other 
companies would not be permitted to participate in the RS even if 
such companies would be otherwise be developing innovative fintech 
products/services. This may lead to a situation whereby entities that 
did not meet the Start Up Criteria would be excluded from 
participating in the RS even if such entities were developing 
innovative products/services. The RBI may therefore consider 
removing the condition that the entity would be required to meet the 
Start Up Criteria. The added advantage to having more established 
companies (whether they are banking companies or non-banking 
financial companies or other companies) participate in the RS is that 
such companies would typically have a greater financial ability to 
withstand failures of products/services being tested in the RS. 

(2) Section 6.5.1(f) which stipulates that applicants should 
demonstrate that their products/services are technologically ready for 
deployment in the broader market. 
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Comment: It may be considered whether it would be better to require 
applicant entities to detail failure criteria which if met would provide 
the RBI with the power to discontinue sandbox testing for an entity, 
please see our comments in paragraph (d)(ii) above to Section 6.5.4 
| of the Regulatory Framework. 

(f) Section 6.7 Boundary conditions 

j Section 6.7 of the Regulatory Framework details certain boundary 
, conditions for the RS. In this regard the RBI may consider requiring 

that the criteria for failure of a test be stipulated upfront by an I 
| applicant. 

| Comment: Please see our comments in paragraph (d)(ii) above to | 
J Section 6.5.4 of the Regulatory Framework. 

(g) Section 7.2.4 Testing (12 weeks) read with Section 7.2.5 I 
I Evaluation (4 weeks) 

Section 7.2.4 of the Regulatory Framework prescribes that the testing 
phase of a product/innovation would last for a maximum period of 12 
| weeks and that the FTU would generate empirical evidence to assess 
j the tests by close monitoring. Section 7.2.5 provides that the I 
j Evaluation phase may last for 4 weeks. Further the final outcome of 
1 the testing of products/services/technology as per the expected I 
parameters including viability/acceptability under the RS shall be 
confirmed by the RBI. The FTU shall assess the outcome reports on | 
j the test and decide on whether the product/service is viable and 
I acceptable under the RS. 

j Comment: It is submitted that the purpose of the RS is to provide a 
space for testing of an innovative product/service in the real world. 

| Therefore it may be considered that once the FTU has vetted the test 
j designs and proposed regulatory modifications, if any as required j 
under Section 7.2.3 of the Regulatory Framework, then the 
product/service should thereafter be eligible for participation in the 
RS. Further where the innovative product/service being tested 
___ contains proprietary technology, there may be a reluctance on the 
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part of applicants to divulge the technology to the FTU for the 
| purposes of monitoring the tests as well as the outcomes of the tests. 

(h) Section 8 Statutory and Legal Issues 

(i) Section 8.1 of the Regulatory Framework mentions that the RBI 
| would provide the appropriate regulatory support by relaxing specific 
| regulatory requirements (which the sandbox entity will otherwise be 

subject to), where necessary, for the duration of the RS. 
j Comment: It would appear that the regulatory support being provided I 
j by the RBI would be limited only to matters for which the RBI would 
| have jurisdiction. It may be considered that to make the RS fully 
| effective as a testing ground, a single window regulatory clearance I 
| system may be implemented whereby an application could be made 
| to the RBI for regulatory relaxation/consent by an applicant entity 
( which would then be foiwded to any other concerned regulator 
| (such as SEBI) with the applicant entity only being entitled to test its 
j product/service in the RS once all regulatory relaxations/consents I 
| have been granted by all regulators having jurisdiction. 

(ii) Section 8.2 of the Regulatory Framework provides that upon 
| successful experimentation and on exiting the RS, the sandbox entity I 
must fully comply with the relevant regulatory requirements, 
j Comment: Depending on the evaluation of the product/service in | 

| question, the RBI may consider, at its discretion, thereafter relaxing | 
the regulatory requirements in respect of such approved I 
| product/service after it has exited the RS. 

| (i) Section 9 Disclosure 

Section 9 of the Regulatory Framework stipulates that the RBI has [ 

| reserved the right to publish any relevant information about the RS | 

applicants on its website, including for the purpose of knowledge 

I transfer and collaboration with other international regulatory 
| agencies. 

j Comment: The RBI may consider limiting the publication of 
| information abo ut RS applicants to non-confidential information and 
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should not publish any confidential or proprietary information 
gathered during the test on its website. The absence of such 
protection may discourage applicants from participating in the RS. 
We strongly believe that addressing the above, would increase the 
effectiveness of the regulatory sandbox and thereby increase the 
speed of innovation in the country. 

Please do let us know if you require any clarifications in relation to 
the above. 

We have taken note of the Reserve Bank of India’s invitation to the 

public to submit comments on the draft Enabling Framework for 
Regulatory Sandbox (“Draft Framework”). 

Please find attached Entity 66 comments and suggestions on the 
Draft Framework. We hope the RBI finds our comments useful. 

Please feel free to reach out to us should you require any 
clarifications. 

Draft Enabling Framework for Regulatory Sandbox: Comments 
& Feedback 



1.2. With this submission, Entity 66 would like to respond to the 
Reserve Bank of India’s (“RBI”) invitation to comment on the draft 
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[™™® r t0 offer an existing service. This being the case we 
I recommend that the RBI constitute a selection committee to 
determine whether an applicant meets the abovementioned eligibility 
criteria (“Selection Committee"). In addition to RBI officials, this 
| Selection Committee should have representatives from the Indian 
| fmtech community. These representatives may include reputed I 
| fintech innovators, thought leaders, technologists and academicians. 

I These individuals could work with RBI officials to scrutinise 
| applications and analyse the underlying technology of proposed 
I financial products or services. 

4. Legal Waivers 4.1. As per Paragraph 4.3 of the Draft Framework 
the RBI has clarified that the RBI cannot provide any legal waivers to 
participants of the RS. We believe that the RBI should elaborate on 
this limitation and explain what these waivers entail. The scope for 
relaxation of or exemption from legal requirements and compliances 
| iS one of ,he most important attributes of a regulatory sandbox. It is 
| What makes ,he sandbox str ucture most appealing to participants. 

| This being the case, we believe the RBI should elaborate on the 

| scope of the legal waivers referred to in Paragraph 4.3 of the Draft 
| Framework. 

5. Focus on Informal Guidance 5.1. One of the key features of 
regulatory sandboxes around the world is the availability of informal 
| regulatory guidance for participants. For instance, in Australia, the 
Australian Securities and Investments Commission fASIC’) offers 
informal guidance to help new businesses consider the important 
regulatory issues applicable to their products/services. This guidance 
usually minimises the time and costs of applying for regulatory 
I licenses. We recommend that the RBI implement a similar 
mechanism for informal and ad-hoc regulatory guidance as part of 
| the RS ' Participants should be allotted nodal officers or points of 
I contact within the RBI and should be allowed to schedule meetings 
| with these officials to obtain guidance and clarifications. This 
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application process. 

6 Finanoia' Services Ombudsman and Compensation Scheme 

61. We notethatthe RS does no, have robust mechanisms ,o protect 
customers of participants. With this risk in mind, we believe that the 
RBI could consider establishing a specialized ombudsman service 
an compensation scheme for customers of RS participants 
e erence may be made to the Financial Ombudsman Service 
( FOS ) and the Financial Services Compensation Scheme ("FSCS") 
established in the UK. The Financial Conduct Authority (TCAl in the 
United Kingdom has allowed customers to avail services and benefits 
° e s and FSCS to protect them when financial products or 
services of sandbox participants malfunction and cause losses The 
FSCS is a deposit insurance and investor compensation scheme for 
customers of authorised financial service firms. The FSCS is 
empowered to pay compensation to an aggrieved customer if a firm 
is unable or unlikely to. Similar mechanisms could be put in place by 
heRBI asmeasures ,o safeguard the interests of Indian customers. 

I 3ITI \/orw __i_" TT ---- 
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am very happy relelsTtSH^T^^ 

Years (2016). but rbi support the captlists. 

1.respect the Indian constitution, Indian Laws. 2 .rbi have the DPSS 

act 2007.3 rbi technical Committee report of mobile banking in2014 

selected four(4)ways for fintech services,(a) STK(b)iot or 

apps(c)sms(d)ussd.amend the 6 . 1.2 add four ways fintech innovative 
ideas not existing. 

3 rbi only based on &support online very unfortunate. 

4.rbi first support &give New IAS 
5.intellectual ideas not interduce in public. 

6 Par 3 6 5 ' 1 entir * conditions against rbi WG committee report. 

Sir I submit full comments,suggestions 8th may2019. 

7.published draft guidelines No right ,0 the Department of banking 
regulation. 
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8.only having authority DPSS Department 


Hope this email finds you well. 

We are one of the leading Fintech organisations in the country, and 

P eased to have come across the draft guidelines for stakeholders 

omments. Before we go ahead and provide our feedback on the 

draft, we would be humbled if our query pertaining to the application 
process is addressed. 

[ We would like to know, before the draft guidelines are implemented 
or dunng the stage of its finalisation, is there any provision for a 
inech entity to participate or be accepted in the Regulatory 
an ox. Or if the selection process is to commence what may be 
the tentative times lines of commencement? 

Many thanks in advance for your assistance. Looking forward to 
hearing from you. 

related to RBI Regulatory Sandbox. We at entity 69 are excited and 
wou d Irke to appreciate your initiative of RBI Regulatory Sandbox 

(Kb). 

Entity 69 has extensive experience of working Credit Bureaus, data 
ureau and Banks globally. We are looking at RS initiative as a major 
step towards better regulation and standardization opportunity We 
would „ke to understand few more finer points either through final 
circular or any other platform RBI might be planning to use to engage 

with interested parties: y 

• Can RS sandbox be utilized for complete market ready product 
testing or can the goal is to run only prototypes to continue to build 
product based on feedback from customers. 

• Any guidelines around cost structure would be helpful for budgetary 
planning to participate in the initiative. 

• One of the major aspect of the initiative is on boarding of customers 
w jc jviii^heip pa rticipant to w ork with actual data. We would like to 
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~ [understand if RBI is planning tol^diitite^^ 

phase, if yes some insight into the process would help, 
j • We suggest a preparation phase prior to RS sandbox testing would 
| help to utilize the test period more effectively. Preparation phase can 
| be 3-6 months based on size of the project. 

J • Can participant company build virtual sandbox and obtain RBI RS 
status, if yes what are the guidelines to do so. 

• Can a product company obtain industry specific regulation waivers I 
to test a product e.g. A credit bureau product company would not 
have required license to run credit bureau, so can the company get 

regulatory waiver to work with actual users, how would such legal 
framework look like. 

• On successful completion of RS testing, will product/ company get 
any formal RBI accreditation and can that be used in marketing j 
communication by the participant company. 

| We will be glad to answer any clarification required for above points. | 

| A face to face meeting might also help to elaborate on some of the I 

| points above. We are looking forward to engage with you on this 
initiative. 
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